Test Methods ( Detailed Overview )

Here is a list of every test performed by Web Scan Service.

Improper Parameter Redirection

Remediation Task

Avoid Redirecting Based On Parameter Values

WASC Classification

Client-side Attacks: Content Spoofing

Affected Products

This issue may affect different types of products

Technical Description

An http parameter was found to hold a URL value and cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phising scam and steal user credentials.

Fix Recommendation

Validate URL and avoid redirections to unknown sites.