XSS in Tgs-Cms Tgs Content Management

CVE-2009-2928

Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.

Affected products

Tgs-cms Tgs_content_management — versions 0.1.6, 0.1.7, 0.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_XF)