CVE-2005-2411

Published: Aug 1, 2005Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user.

Affected (2)

Products: Tdiary: Tdiary

Tdiary

1 product

Tdiary

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Tdiary Tdiary	Up to 2.0.1
Tdiary Tdiary	Version 2.1.1

References (14)

http://secunia.com/advisories/16329

Source: security@debian.org

http://secunia.com/advisories/16787

Source: security@debian.org

http://sourceforge.net/forum/forum.php?forum_id=482743

Source: security@debian.org

http://www.debian.org/security/2005/dsa-808

Source: security@debian.org

http://www.osvdb.org/18604

Source: security@debian.org

http://www.securityfocus.com/bid/14500

Source: security@debian.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/21735

Source: security@debian.org

http://secunia.com/advisories/16329