medium6.9
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Impact
Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | jweiland/kk-downloader | < 1.2.2 | 1.2.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kurt Kunig | Kk Downloader | through 1.2.1 Versions 1.1.0, 1.1.1, 1.1.2, 1.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://secunia.com/advisories/37550
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
- http://www.securityfocus.com/bid/37168
- https://github.com/advisories/GHSA-p65f-652v-35r2
- https://nvd.nist.gov/vuln/detail/CVE-2009-4160
- https://web.archive.org/web/20091219105714/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017
- https://web.archive.org/web/20200228220902/http://www.securityfocus.com/bid/37168