SMF version 2.0.15 with SMF4Mobile versions 1.1.5 and 1.2 suffer from an open redirection vulnerability.