Read the docs

Tdiary

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tdiary records in CISA KEV

No Tdiary vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tdiary 4 records LOW

Records

4 records in Tdiary · all components

TI-2006-06595 CVE-2006-6852 · GHSA-2mq8-fvvr-mhhg

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote…

Priority LOW 29

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01037 Published 2007-01-04 No fix listed CWE-20
TI-2010-00694 CVE-2010-0726 · GHSA-39vp-wwfv-g5fj

Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission)…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01989 Published 2010-03-02 No fix listed CWE-79
TI-2006-05938 CVE-2006-6174 · GHSA-7fqm-53m9-2h2w

Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in (1) tdiary.rb and (2) skel/conf.rht…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01681 Published 2006-11-30 No fix listed
Open these records in search →