CVE-2005-2411: Tdiary

Medium severity, CVSS 5.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user.

Affected products

• Tdiary Tdiary: up to and including 2.0.1; version 2.1.1 only

Published 2005-08-01. Last modified 2026-06-16.