Open redirect

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

CVE-2012-1070

The CVE-2012-1070 entry concerns a Cross-Site Scripting (XSS) vulnerability in TYPO3’s Modern FAQ (irfaq) extension. Affected version information indicates 1.1.2 and earlier than 1.1.4; the issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with the desc...

CVE-2011-5079

CVE-2011-5079 describes an open redirect vulnerability in the TYPO3 Modern FAQ (irfaq) extension, affecting version 1.1.2 and other versions prior to 1.1.4. The issue allows remote attackers to redirect users to arbitrary external sites (via the likely return_url parameter), enabling phishing-lik...

CVE-2012-1070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...

CVE-2011-5079: Improper Input Validation

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...