CVE-2009-0862

Published: Mar 10, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected (17)

Products: Tangocms: Tangocms

Tangocms

1 product

Tangocms

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Tangocms Tangocms	Up to 2.2.3
Tangocms Tangocms	Version 1.0.6
Tangocms Tangocms	Version 1.0.8.1
Tangocms Tangocms	Version 1.0.8
Tangocms Tangocms	Version 2.0.0
Tangocms Tangocms	Version 2.0.1
Tangocms Tangocms	Version 2.0.2
Tangocms Tangocms	Version 2.0.3
Tangocms Tangocms	Version 2.0.4
Tangocms Tangocms	Version 2.0.5
Tangocms Tangocms	Version 2.0.6
Tangocms Tangocms	Version 2.1.0
Tangocms Tangocms	Version 2.1.1
Tangocms Tangocms	Version 2.1.2
Tangocms Tangocms	Version 2.2.0
Tangocms Tangocms	Version 2.2.1
Tangocms Tangocms	Version 2.2.2