CVE-2009-4855

Description

References

• secure.t3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability
• exploit-db.com/exploits/9380
• securityfocus.com/bid/35975 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/52308

More vulnerabilities in typo3

• CVE-2026-6553HIGH 7.5Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields …
• CVE-2026-0859HIGH 7.8TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deseri…
• CVE-2025-59022HIGH 8.1Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of w…
• CVE-2025-59021MEDIUM 6.4Backend users with access to the redirects module and write permission on the sys_redirect table were able to read, create, and modify any r…
• CVE-2025-59020MEDIUM 6.5By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave…