4.3
CVSSv2

CVE-2009-2928

Published: 21/08/2009 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote malicious users to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.

Vulnerable Product Search on Vulmon Subscribe to Product

tgs-cms tgs content management 0.2.5

tgs-cms tgs content management 0.3.0

tgs-cms tgs content management 0.2.0

tgs-cms tgs content management 0.3.2

tgs-cms tgs content management 0.1.7

tgs-cms tgs content management 0.1.6

Exploits

################################################################# ################################################################# # _______ _ __ __ _ _ ______ # # |__ __| (_) | \/ (_) | |___ / # # | | _____ ___ ___| \ / |_ _ __ __| | / / # # | |/ _ \ \/ ...