CVE-2009-4160

TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

5.0 MediumFix available

Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

Exploit likelihood

1.21%Up 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2009-4160
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-4160
Updated: 2026-11-02

EUVDEUVD-2009-4130 No score

Record: EUVD-2009-4130
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p65f-652v-35r2 6.9

TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

Record: GHSA-p65f-652v-35r2
CVSS 4.0: 6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Weakness: CWE-200
Updated: 2026-11-02

OSVGHSA-p65f-652v-35r2 6.9

TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

Record: GHSA-p65f-652v-35r2
CVSS 4.0: 6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Weakness: CWE-200
Updated: 2026-11-02

Affected products

kurt kunig kk downloader

Affected packages

Affected packages
Package	Affected	Fixed
`jweiland/kk-downloader` Packagist	before 1.2.2	1.2.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-4160 is a medium vulnerability (CVSS 5.0) in Kurt Kunig Kk Downloader, published December 2, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. Fixed in jweiland/kk-downloader 1.2.2.