CVE-2006-6852

Description

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml and (2) i.conf.rhtml. NOTE: some of these details are obtained from third party information.

References

http://www.vupen.com/english/advisories/2006/5201

http://www.tdiary.org/20061210.html

http://www.securityfocus.com/bid/21811

http://secunia.com/advisories/23465

http://jvn.jp/jp/JVN%2331185550/index.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS