I don't think it has something to do with Drupal. I faced similar issue before in WordPress and it was because of mod_security rules. Mod_security was blocking passing parameters in URLs. The top answer in this post might help you.
Ahmed Jabar
- 282
- 2
- 10