PT-2012-2057

Name of the Vulnerable Software and Affected Versions TYPO3 Modern FAQ irfaq extension versions 1.1.2 through 1.1.3 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the returnUrl parameter. This can be...

CVE-2011-5079: Improper Input Validation

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

PT-2012-3058

Name of the Vulnerable Software and Affected Versions TYPO3 Modern FAQ irfaq extension versions 1.1.2 through 1.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the return url...

CVE-2012-1070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...