TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

MEDIO 5.0CVE-2009-4160 · GHSA-p65f-652v-35r2 · Published 02/12/2009 · updated 16/06/2026

En resumen

CVE-2009-4160 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a jweiland/kk-downloader, kk downloader (kurt kunig).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.5% de las vulnerabilidades.
Solución: actualizar a 1.2.2 o posterior.

Package	Affected versions	Patched versions
jweiland/kk-downloader Packagist	`< 1.2.2`	`1.2.2`
kk downloader kurt_kunig	`= 1.1.0= 1.1.1= 1.1.2= 1.2.0≤ 1.2.1`	No fix yet

Description

Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2009-4160 · ADVISORY
jweiland-net/kk_downloader · PACKAGE
web.archive.org/web/20091219105714/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 · WEB
web.archive.org/web/20200228220902/http://www.securityfocus.com/bid/37168 · WEB
secunia.com/advisories/37550 · Vendor Advisory
typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 · Patch
securityfocus.com/bid/37168 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free