CVE-2011-5079

Published: Feb 14, 2012Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."

Affected (5)

Products: Netcreators: Irfaq

1 product

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netcreators Irfaq	Up to 1.1.2
Netcreators Irfaq	Version 1.0.1
Netcreators Irfaq	Version 1.0.2
Netcreators Irfaq	Version 1.1.0
Netcreators Irfaq	Version 1.1.1

Running on/with	Platform Versions
Typo3 Typo3	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://osvdb.org/78750

Source: cve@mitre.org

http://secunia.com/advisories/47823

Source: cve@mitre.org

Vendor Advisory

http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/

Source: cve@mitre.org

Patch

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/51845

Source: cve@mitre.org

http://osvdb.org/78750

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47823

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/51845

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.