CVE-2006-6174

NameCVE-2006-6174
DescriptionCross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in (1) tdiary.rb and (2) skel/conf.rhtml.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs400447, 400650

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
tdiary (PTS)stretch5.0.2-1fixed
buster5.0.11-1fixed
bullseye5.1.5-1fixed
bookworm5.2.3-2fixed
sid, trixie5.3.0-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
tdiarysource(unstable)2.0.2+20060303-4.1400447, 400650

Search for package or bug name: Reporting problems