auxiliary/admin/http/typo3_sa_2009_001

functional

TYPO3 sa-2009-001 Weak Encryption Key File Disclosure

view exploit source metasploittype auxiliarypublished 2009-01-20catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2009-0255US	high7.5OT elevated	9.44% (95th)	Exploit	2009-01-22
The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which ma…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.