NVD

Id
65395  
Name
CVE-2006-6852  
Description
Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by (1) conf.rhtml and (2) i.conf.rhtml. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-31  
Modified Date
2011-03-07  
Seq
2006-6852  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341148 65395 CVE-2006-6852 JVN#31185550  View
341149 65395 CVE-2006-6852 21811  View
341150 65395 CVE-2006-6852 http://www.tdiary.org/20061210.html  View
341151 65395 CVE-2006-6852 ADV-2006-5201  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58657 JVNDB-2006-000853 tDiary における任意の Ruby スクリプトを実行される脆弱性 tDiary 開発プロジェクトにより提供されている Web 日記支援ソフト tDiaryには、任意の Ruby スクリプトが実行可能な脆弱性が存在します。 CVE-2006-6852 22954 CVE-2006-6852 65395 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000853.html 2006-12-28 2007-04-01 View