CVE-2010-0726

Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.

• CWE-79

• http://jvn.jp/en/jp/JVN73331060/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2010-000005
• http://osvdb.org/62562
• http://secunia.com/advisories/38742Vendor Advisory
• http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573
• http://www.securityfocus.com/bid/38413Patch
• http://www.tdiary.org/20100225.htmlPatch, Vendor Advisory
• http://jvn.jp/en/jp/JVN73331060/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2010-000005
• http://osvdb.org/62562
• http://secunia.com/advisories/38742Vendor Advisory
• http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573
• http://www.securityfocus.com/bid/38413Patch
• http://www.tdiary.org/20100225.htmlPatch, Vendor Advisory

Published

Mar 2, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0720SQL injection vulnerability in news.php in Erotik Auktionsha…
• CVE-2010-0721SQL injection vulnerability in news.php in Auktionshaus Gelb…
• CVE-2010-0722SQL injection vulnerability in news.php in Php Auktion Pro a…
• CVE-2010-0723SQL injection vulnerability in news.php in Ero Auktion 2.0 a…
• CVE-2010-0724SQL injection vulnerability in showimg.php in Arab Cart 1.0.…
• CVE-2010-0725Cross-site scripting (XSS) vulnerability in showimg.php in A…
• CVE-2010-0727The gfs2_lock function in the Linux kernel before 2.6.34-rc1…
• CVE-2010-0728smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support …
• CVE-2010-0729A certain Red Hat patch for the Linux kernel in Red Hat Ente…
• CVE-2010-0730The MMIO instruction decoder in the Xen hypervisor in the Li…
• CVE-2010-0731The gnutls_x509_crt_get_serial function in the GnuTLS librar…
• CVE-2010-0732gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-scre…