CVE-2009-2928: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previouspage parameter, a different vector than CVE-2008-6839...