CVE-2015-5510

Published: Aug 18, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages.

Affected (10)

Products: Content Construction Kit Project: Content Construction Kit

Content Construction Kit Project

1 product

Content Construction Kit

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Content Construction Kit Project Content Construction Kit	Version 6.x-2.0
Content Construction Kit Project Content Construction Kit	Version 6.x-2.1
Content Construction Kit Project Content Construction Kit	Version 6.x-2.2
Content Construction Kit Project Content Construction Kit	Version 6.x-2.3
Content Construction Kit Project Content Construction Kit	Version 6.x-2.4
Content Construction Kit Project Content Construction Kit	Version 6.x-2.5
Content Construction Kit Project Content Construction Kit	Version 6.x-2.6
Content Construction Kit Project Content Construction Kit	Version 6.x-2.7
Content Construction Kit Project Content Construction Kit	Version 6.x-2.8
Content Construction Kit Project Content Construction Kit	Version 6.x-2.9