CyberSec.Space Logo
Back to CVE Browser

CVE-2009-2928

MEDIUM
4.3
CVSS Severity Score
EPSS Score0.0620%
EPSS Percentile40.40th
PublishedAug 21, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.

Affected Platforms (CPE)

📦
Tgs Cms

Tgs Content Management

= 0.1.6
📦
Tgs Cms

Tgs Content Management

= 0.1.7
📦
Tgs Cms

Tgs Content Management

= 0.2.0
📦
Tgs Cms

Tgs Content Management

= 0.2.5
📦
Tgs Cms

Tgs Content Management

= 0.2.5
📦
Tgs Cms

Tgs Content Management

= 0.2.5
📦
Tgs Cms

Tgs Content Management

= 0.3.0
📦
Tgs Cms

Tgs Content Management

= 0.3.2
📦
Tgs Cms

Tgs Content Management

= 0.3.2

References & Advisories

🔗 http://www.exploit-db.com/exploits/9434
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/52481
🔗 http://www.exploit-db.com/exploits/9434
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/52481

Related Vulnerabilities

CVE-2009-29297.5

Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via ...

CVE-2008-68394.3

Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary w...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...