VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 21, 2009· Updated Apr 23, 2026

CVE-2009-2928

CVE-2009-2928

Description

Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.

Affected products

9
  • Tgs Cms/Tgs Content Management9 versions
    cpe:2.3:a:tgs-cms:tgs_content_management:0.1.6:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r2:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r3:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:r2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.