CVE-2009-2138

CVE-2009-2138 affects TBDev.NET 01-01-08 with multiple open redirect vulnerabilities. The issue allows remote attackers to redirect users to arbitrary sites via (1) the returnto parameter in login.php and (2) the returnto parameter in a delete action to news.php. This can be leveraged for phishin...