Description
Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."
References (5)
Core 5
Core References
Patch, Vendor Advisory x_refsource_misc
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/51845
Patch x_refsource_confirm
http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/78750
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/47823
Scores
EPSS
0.0117
EPSS Percentile
63.6%
Details
CWE
CWE-20
Status
published
Products (5)
netcreators/irfaq
1.0.1
netcreators/irfaq
1.0.2
netcreators/irfaq
1.1.0
netcreators/irfaq
1.1.1
netcreators/irfaq
< 1.1.2
Published
Feb 14, 2012
Tracked Since
Feb 18, 2026