Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-0815.
PoCs published by Lolek, including Metasploit module auxiliary/admin/http/typo3_sa_2009_002.
AI-analyzed exploit summary This exploit targets CVE-2009-0815 in TYPO3, leveraging a vulnerability in the jumpurl feature to bypass security checks and disclose the contents of arbitrary files, such as localconf.php. It first retrieves a juHash value and then uses it to fetch the file content.
Description
The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request.
Exploits (2)
This exploit targets CVE-2009-0815 in TYPO3, leveraging a vulnerability in the jumpurl feature to bypass security checks and disclose the contents of arbitrary files, such as localconf.php. It first retrieves a juHash value and then uses it to fetch the file content.
This Metasploit module exploits a file disclosure vulnerability in TYPO3's jumpUrl mechanism (CVE-2009-0815) by bypassing the juHash security check to read arbitrary files accessible to the web server user.