CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.
Date published : 2007-03-22
http://www.securityfocus.com/archive/1/463291/100/0/threaded