Vulnerabilities > TGS CMS
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-08-21 | CVE-2009-2929 | SQL Injection vulnerability in Tgs-Cms TGS Content Management Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language, and (11) db_host parameters to cms/index.php; and the (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action, and (25) userfile1 parameters to cms/frontpage_ception.php. | 7.5 |
| 2009-08-21 | CVE-2009-2928 | Cross-Site Scripting vulnerability in Tgs-Cms TGS Content Management Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839. | 4.3 |
| 2009-06-27 | CVE-2008-6839 | Cross-Site Scripting vulnerability in Tgs-Cms TGS Content Management 0.3.2 Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg and (2) goodmsg parameters to (a) login.php and (b) index.php, and the (3) dir and (4) id parameters to index.php. | 4.3 |
| 2006-11-06 | CVE-2006-5732 | SQL Injection vulnerability in T.G.S. CMS Logout.PHP SQL injection vulnerability in logout.php in T.G.S. | 5.0 |