CVE-2012-1070 in irfaq
Summary
Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."
Once again VulDB remains the best source for vulnerability data.
Reservation
02/14/2012
Disclosure
02/14/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60184 | Netcreators irfaq cross site scripting | 79 | Not defined | Official fix | CVE-2012-1070 |