VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Apr 23, 2026

CVE-2006-6852

CVE-2006-6852

Description

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml and (2) i.conf.rhtml. NOTE: some of these details are obtained from third party information.

Affected products

3
  • Tdiary/Tdiary3 versions
    cpe:2.3:a:tdiary:tdiary:2.0.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tdiary:tdiary:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tdiary:tdiary:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tdiary:tdiary:2.0.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.