| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | CVE-2009-0815 | 10 Feb 200900:00 | – | circl |
 | CVE-2009-0815 | 5 Mar 200902:00 | – | cvelist |
 | Debian DSA-1720-1 : typo3-src - several vulnerabilities | 12 Feb 200900:00 | – | nessus |
| FreeBSD : typo3 -- XSS and information disclosure (cc47fafe-f823-11dd-94d9-0030843d3802) | 12 Feb 200900:00 | – | nessus |
| TYPO3 'jumpUrl' Mechanism Information Disclosure | 12 Feb 200900:00 | – | nessus |
 | Typo3 FD | 26 Jan 201200:00 | – | dsquare |
 | TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure | 10 Feb 200900:00 | – | exploitdb |
 | TYPO3 leaks a hash secret in an error message | 2 May 202203:18 | – | github |
 | Typo3 sa-2009-002 File Disclosure | 15 Mar 200902:32 | – | metasploit |
 | CVE-2009-0815 | 5 Mar 200902:30 | – | nvd |
10
Node
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| jumpurl | query param | /index.php | Disclosing files through TYPO3 jumpUrl error path leading to file read via juHash derivation. | CWE-200 |
| juSecure | query param | /index.php | Disclosing files through TYPO3 jumpUrl error path leading to file read via juHash derivation. | CWE-200 |
| type | query param | /index.php | Disclosing files through TYPO3 jumpUrl error path leading to file read via juHash derivation. | CWE-200 |
| locationData | query param | /index.php | Disclosing files through TYPO3 jumpUrl error path leading to file read via juHash derivation. | CWE-200 |
| jumpurl | query param | /index.php | Using a leaked juHash to access arbitrary files via TYPO3 jumpUrl mechanism. | CWE-200 |
| juSecure | query param | /index.php | Using a leaked juHash to access arbitrary files via TYPO3 jumpUrl mechanism. | CWE-200 |
| type | query param | /index.php | Using a leaked juHash to access arbitrary files via TYPO3 jumpUrl mechanism. | CWE-200 |
| juHash | query param | /index.php | Using a leaked juHash to access arbitrary files via TYPO3 jumpUrl mechanism. | CWE-200 |
| locationData | query param | /index.php | Using a leaked juHash to access arbitrary files via TYPO3 jumpUrl mechanism. | CWE-200 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:05Current
6.6Medium risk
Vulners AI Score6.6
CVSS 25
EPSS0.42227