Approved changes feed: RSS · Atom

cpe:2.3:a:tdiary:tdiary:2.0.3:*:*:*:*:*:*:*

part: a version: 2.0.3 update: *

VendorTdiary (95abee2a-f7fb-5d5e-8ea1-649c3cb97782)
ProductTdiary (d7c73bfa-19b5-5e58-803b-f659b3e8ec5d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0726 vulnerable 2026-06-08 04:52:04.139122 Details available
Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.
Published: 2010-03-02T19:00:00.000Z
Updated: 2024-09-16T17:49:13.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6852 vulnerable 2026-06-08 04:49:29.854485 Details available
Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml and (2) i.conf.rhtml. NOTE: some of these details are obtained from third party information.
Published: 2007-01-04T02:00:00.000Z
Updated: 2024-08-07T20:42:07.179Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.