Debian/tdiary: unknown

Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in (1) tdiary.rb a

Action: Upgrade tdiary to 2.0.2+20060303-4.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-6174#Debian:14/tdiary
• https://security-tracker.debian.org/tracker/CVE-2006-6174

published 2006-11-30T16:28:00Z · modified 2026-10-22T23:47:22.044433553Z · JSON