osCommerce is a popular open source shopping cart package. Recently spammers have been using redirect pages to help obfuscate their spam URLs. osCommerce has an open redirect page that is being abused. Here is an example of the URLs in the spam:
http://www.site.com/catalog/redirect.php?action=url&goto=www.pleasebuymyworthlesscrap.info/?asxfdsa8f
osCommerce hasn't done anything about this in their latest release, so I made a patch to solve the problem. You can download the patch
here. To apply the patch:
patch /path/to/redirect.php oscommerce_redirect_spam_prevent.patch
Then enter your allowed domains in the $allowed_goto array.