EDB-15856

PoC

TYPO3 - Arbitrary File Retrieval

view exploit source exploit_dbtype webappsauthor ikkipublished 2010-12-29catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2010-5099US	medium6.8	3.08% (88th)	Exploit	2012-05-30
The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file ty…
CVE-2012-2344US	—	—	Exploit	2012-05-21
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-5099. Reason: This candidate is a duplicate of CVE-2010-5099. Notes: All CVE users should reference CVE-2…
CVE-2010-3714US	high7.1	24.1% (98th)	Exploit	2010-10-25
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare cert…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.