CVE-2009-2141

CVE-2009-2141 describes multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08. The affected component is the web application TBDev.NET, with exploitable vectors including (1) the returnto parameter to makepoll.php, (2) the returnto parameter in a delete action to polls.php, an...

CVE-2009-2138

CVE-2009-2138 affects TBDev.NET 01-01-08 with multiple open redirect vulnerabilities. The issue allows remote attackers to redirect users to arbitrary sites via (1) the returnto parameter in login.php and (2) the returnto parameter in a delete action to news.php. This can be leveraged for phishin...