CVE-2006-6852
Severity:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
31/12/2006
Last modified:
08/03/2011
Description
Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml and (2) i.conf.rhtml. NOTE: some of these details are obtained from third party information.
Impact
Base Score 2.0
6.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:tdiary:tdiary:2.0.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:tdiary:tdiary:2.0.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:tdiary:tdiary:2.0.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page