GCVE - cpe:2.3:a:tdiary:tdiary:2.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tdiary:tdiary:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0726`	vulnerable	2026-06-08 04:52:04.139787	Details available Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters. Published: 2010-03-02T19:00:00.000Z Updated: 2024-09-16T17:49:13.687Z Open on db.gcve.eu Reference links http://osvdb.org/62562 http://jvn.jp/en/jp/JVN73331060/index.html http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573 http://secunia.com/advisories/38742 http://www.tdiary.org/20100225.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2411`	vulnerable	2026-06-08 04:48:29.276119	Details available Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user. Published: 2005-08-01T04:00:00.000Z Updated: 2024-08-07T22:22:49.116Z Open on db.gcve.eu Reference links http://secunia.com/advisories/16787 http://sourceforge.net/forum/forum.php?forum_id=482743 http://www.debian.org/security/2005/dsa-808 http://www.securityfocus.com/bid/14500 http://secunia.com/advisories/16329	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.