Vulnerabilities > Tdiary > Tdiary > 2.1.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-03-02 | CVE-2010-0726 | Cross-Site Scripting vulnerability in Tdiary Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters. | 4.3 |
| 2005-08-01 | CVE-2005-2411 | Cross-Site Request Forgery vulnerability in Tdiary 2.1.1 Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user. | 5.1 |