CVE-2011-5079

Description

Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."

References

http://www.securityfocus.com/bid/51845

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/

http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/

http://secunia.com/advisories/47823

http://osvdb.org/78750

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS