CVE catalog

CVE-2006-6852

tdiary: CVE-2006-6852

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
1.04% · Oct 25, 2026

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml and (2) i.conf.rhtml. NOTE: some of these details are obtained from third party information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantdiarysid5.6.0-3fixed
Debiantdiaryforky5.6.0-3fixed
Debiantdiarytrixie5.3.0-2fixed
Debiantdiarybookworm5.2.3-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantdiarysourcesid2.0.2+20060303-5mediumNot reported[403345]
Debiantdiarysourceforky2.0.2+20060303-5mediumNot reported[403345]
Debiantdiarysourcetrixie2.0.2+20060303-5mediumNot reported[403345]
Debiantdiarysourcebookworm2.0.2+20060303-5mediumNot reported[403345]

[Debian bug #403345]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [tdiary]Fixed
    Details (2)

    • 5.2.3-2 · all · bookworm

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · bookworm; dsa · tdiary · debian · 12

    • 5.2.3-2 · all · bookworm

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · bookworm; dsa · tdiary · debian · 12

  • [tdiary-core]Fixed

    Source package: [tdiary]

    Details (2)

    • 5.2.3-2 · all · bookworm

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · bookworm; dsa · tdiary · debian · 12

    • 5.2.3-2 · all · bookworm

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · bookworm; dsa · tdiary · debian · 12

[Debian 13 (Trixie)]

  • [tdiary]Fixed
    Details (2)

    • 5.3.0-2 · all · trixie

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · 13

    • 5.3.0-2 · all · trixie

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · 13

  • [tdiary-core]Fixed

    Source package: [tdiary]

    Details (2)

    • 5.3.0-2 · all · trixie

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · 13

    • 5.3.0-2 · all · trixie

      Fixed · Fixed: 2.0.2+20060303-5

      dsa · tdiary · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]