CVE-2010-0726
- State
- Published
- Severity
- Not scored
- Published
- Mar 2, 2010
- Updated
- Sep 16, 2024
- Reserved
- Feb 26, 2010
Description
Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 62562vdb-entry
- JVN#73331060third-party-advisory
- http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573
- 38742third-party-advisory
- http://www.tdiary.org/20100225.html
- 38413vdb-entry
- JVNDB-2010-000005third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.