Approved changes feed: RSS · Atom

cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:*:*:*:*:*:*:*

part: a version: 0.2.5 update: *

VendorTgs Cms (dfb31aee-8d2d-56c9-863f-de78e17d18ab)
ProductTgs Content Management (f480fff9-1256-50d0-a093-07ee47b77e18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2929 vulnerable 2026-06-08 04:51:31.377787 Details available
Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language, and (11) db_host parameters to cms/index.php; and the (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action, and (25) userfile1 parameters to cms/frontpage_ception.php. NOTE: some of these parameters may be applicable only in nonstandard versions of the product, and cms/frontpage_ception.php may be cms/frontpage_caption.php in all released versions.
Published: 2009-08-21T20:21:00.000Z
Updated: 2024-08-07T06:07:37.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2928 vulnerable 2026-06-08 04:51:31.374557 Details available
Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839.
Published: 2009-08-21T20:21:00.000Z
Updated: 2024-08-07T06:07:37.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.