Back to Database
Status published
Medium
CVE-2010-0726
Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0726
Credits & Attribution
No credits recorded in the NVD database.
References
- http://osvdb.org/62562
- http://jvn.jp/en/jp/JVN73331060/index.html
- http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573
- http://secunia.com/advisories/38742
- http://www.tdiary.org/20100225.html
- http://www.securityfocus.com/bid/38413
- http://jvndb.jvn.jp/jvndb/JVNDB-2010-000005
More from tdiary
View All →CVE-2006-6852
Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows...
Medium
6
CVE-2006-6174
Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x...
Medium
4.3
CVE-2005-2411
Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary...
Medium
5.1
Affected Vendor
tdiary
View all reports →Affected Software
tdiary
Vulnerable Versions:
0, 2.0.1, 2.0.2, 2.0.3, 2.1.1, 2.1.4.2006-11-15
Timeline
Official Publish:
March 2nd, 2010
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.