CVE-2010-0726

MEDIUM 4.3CVE-2010-0726 · Published 02/03/2010 · updated 16/06/2026

In short

CVE-2010-0726 is a MEDIUM (CVSS 4.3) vulnerability affecting tdiary (tdiary).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tdiary tdiary	`= 2.0.1= 2.0.2= 2.0.3= 2.1.1= 2.1.4.2006-11-15≤ 2.2.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.

References

jvn.jp/en/jp/JVN73331060/index.html
jvndb.jvn.jp/jvndb/JVNDB-2010-000005
osvdb.org/62562
secunia.com/advisories/38742 · Vendor Advisory
tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb
securityfocus.com/bid/38413 · Patch
tdiary.org/20100225.html · Patch

More vulnerabilities in tdiary

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free