CVE-2010-2021

Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter.

• CWE-20

• http://drupal.org/node/1633054Patch, Vendor Advisory
• http://drupal.org/node/768244
• http://secunia.com/advisories/49523Vendor Advisory
• http://www.madirish.net/?article=460Patch
• http://www.openwall.com/lists/oss-security/2012/06/14/3
• http://www.osvdb.org/82959
• http://www.securityfocus.com/bid/54002
• https://drupal.org/node/1378116Patch
• https://drupal.org/node/1378118Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76293
• http://drupal.org/node/1633054Patch, Vendor Advisory
• http://drupal.org/node/768244
• http://secunia.com/advisories/49523Vendor Advisory
• http://www.madirish.net/?article=460Patch
• http://www.openwall.com/lists/oss-security/2012/06/14/3
• http://www.osvdb.org/82959
• http://www.securityfocus.com/bid/54002
• https://drupal.org/node/1378116Patch
• https://drupal.org/node/1378118Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76293

Published

Jun 25, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2015Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow…
• CVE-2010-2016SQL injection vulnerability in details.php in Iceberg CMS al…
• CVE-2010-2017Cross-site scripting (XSS) vulnerability in hasil-pencarian.…
• CVE-2010-2018Directory traversal vulnerability in downlot.php in Lokomedi…
• CVE-2010-2019SQL injection vulnerability in downlot.php in Lokomedia CMS …
• CVE-2010-2020sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel i…
• CVE-2010-2022jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "…
• CVE-2010-2023transports/appendfile.c in Exim before 4.72, when a world-wr…
• CVE-2010-2024transports/appendfile.c in Exim before 4.72, when MBX lockin…
• CVE-2010-2025Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-2026The web interface on the Cisco Scientific Atlanta WebSTAR DP…
• CVE-2010-2027Mathematica 7, when running on Linux, allows local users to …