Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2009-2138

Published: 19/06/2009 Updated: 29/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via (1) the returnto parameter to login.php or (2) the returnto parameter in a delete action to news.php. NOTE: this can be leveraged for cross-site scripting (XSS) by redirecting to a data: URI.

Vulnerable Product Search on Vulmon Subscribe to Product

tbdev tbdev.net

Exploits

Exploit DB: tbdev 01-01-2008 - Multiple Vulnerabilities
TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008 (16th January 2008) (newest) Info: TBDEVNET is a project to further enhance, update and develop a software (php peer-to-peer) from the original torrentbits/bytemonsoon source code Credits: InterN0T External Links: wwwtbdevnet -:: The Adviso ...

References

CWE-20http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.htmlhttps://www.exploit-db.com/exploits/8942https://nvd.nist.govhttps://www.exploit-db.com/exploits/8942/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCPCVE-2024-4577CVE-2024-2695CVE-2024-31870injectionCVE-2024-3813arbitrary codeCVE-2024-27801CVE-2024-30120
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook