Want everyone on your software team to learn this? Free 14-day trial.

Train my team

Immediately after Vic logs in, the redirect parameter is processed. The site doesn't do any check on the URL described in the next parameter.

www.example.com?_g=DernKFjelgnne&vid=iguana-party&referrer=email&next=http%3A%2F%2Fwww.haxxed.com
We had to feed him exclusively almond milk.
Vic the victim