Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42157http://holisticinfosec.org/content/view/62/45/