CVE-2009-3819
Estado: ModificadaAlta (10)—
Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.46%
- Percentil entre todas las CVEs puntuadas: 84
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-3819",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-10-28T10:30:00.797",
"references": [
{
"url": "http://secunia.com/advisories/37095",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/37095",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en the Random Images (maag_randomimage) extension v1.6.4 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos de shell a través de vectores no especificados."
}
],
"lastModified": "2026-06-16T23:12:24.857",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18A420CC-4277-48B2-9A66-6DDAC9044EF1",
"versionEndIncluding": "1.6.4"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95424F48-8382-4CB2-8646-B4728DCE69FE"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "170E0D7E-9604-4A0C-829E-BCC4ACBC060F"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "283B2C4F-B621-439F-803E-65BA70628662"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ED37F65-7DC9-4BDE-B263-A438D17D8DBC"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9A56F4-8AA3-4D34-8AB1-57598BE75046"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D49B8DB2-64A4-41FE-B58C-B4306272C30B"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A02063A7-37EC-4EE4-B125-98D217B7E9D0"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEE27643-45FF-4CF0-B371-E44555F19E61"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48BAC3B6-293E-4069-8F1C-C6D0EEDAC050"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7071023B-6A06-4BF9-A09E-7780D0E7492E"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63728811-B095-4D78-837F-48090556FA1E"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA50B1AE-62BD-47A9-B5E5-B23FF8BC66A2"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A6C1383-D6BF-4974-BCB2-1508B676F1C4"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0264710-9DED-4CF7-9853-4216CEE4FF58"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A038C7D8-B875-4657-A178-3741240835B8"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D1526A5-9A7D-4EC7-870E-5E14736E5401"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "652CE8EA-395C-4CF9-894F-D65FA8BD9C27"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86D7BFCD-A90A-4FAA-84E6-82D4DA2F668F"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CD1EF4C-A164-47FB-9CC3-1FA8C2053C54"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C23F763-5691-42F1-97E7-6EF90E5C627D"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E85939C-2F7D-4651-8A14-D223A099EBC3"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78C38576-EC47-434D-8C1B-0E9188EA7A7C"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.2.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B80DE17-8604-4F20-BA02-012A636D7D1C"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28B7DC02-697C-4130-ABBA-75BE2716D491"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D50E566B-D9C0-402B-B83D-69DE2247EF0B"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A16B2B61-2D71-46C9-B38E-32403E39A1D2"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8825D1E-2694-4BF4-A58F-C625C0D0B453"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0A2B8DE-4516-4F91-A56E-E621F76C3F00"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D6F8600-1F08-460E-B021-77F8D3209FB6"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "793D2B07-3B1D-4E47-9086-A5D5DEB9B1C8"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D37AE0A4-21BA-47FD-BD83-3A5E9B93969B"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFDA7AC1-54D1-4F24-A131-221AD172AF3B"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDDAE991-4697-4981-ACF0-1A6B512A5B7D"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.5.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB2AD0D-44BE-4F38-9290-CA4DD7FC373A"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E77F4DE7-F986-44F4-A9C8-AE72D6D9A353"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13C5203A-0BA9-4091-BE77-0297A16502BC"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4AF0510-4807-4554-A6CE-AB3D2018CED1"
},
{
"criteria": "cpe:2.3:a:urs_maag:maag_randomimage:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "229CC6E7-4B2A-4C28-A820-68DDCC23D727"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}