Sco OWASP CVEs for Unvalidated Redirect in 1996