Cross site scripting

2009-08-2120:30:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.

CPENameOperatorVersion
tgs_content_managementeq0.2.0
tgs_content_managementeq0.3.2 r2
tgs_content_managementeq0.3.2
tgs_content_managementeq0.2.5
tgs_content_managementeq0.2.5 r3
tgs_content_managementeq0.3.0
tgs_content_managementeq0.1.7
tgs_content_managementeq0.2.5 r2
tgs_content_managementeq0.1.6

Name	Operator	Version
tgs_content_management	eq	0.2.0
tgs_content_management	eq	0.3.2 r2
tgs_content_management	eq	0.3.2
tgs_content_management	eq	0.2.5
tgs_content_management	eq	0.2.5 r3
tgs_content_management	eq	0.3.0
tgs_content_management	eq	0.1.7
tgs_content_management	eq	0.2.5 r2
tgs_content_management	eq	0.1.6