CVE-2009-0815

This exploit targets CVE-2009-0815 in TYPO3, leveraging a vulnerability in the jumpurl feature to bypass security checks and disclose the contents of arbitrary files, such as localconf.php. It first retrieves a juHash value and then uses it to fetch the file content.

This Metasploit module exploits a file disclosure vulnerability in TYPO3's jumpUrl mechanism (CVE-2009-0815) by bypassing the juHash security check to read arbitrary files accessible to the web server user.