• info
• discussion
• exploit
• solution
• references

TDiary Cross-Site Request Forgery Vulnerability

Solution:
The vendor has released tDiary versions 2.0.2 and 2.1.2 to address this issue.

Debian Linux has released security advisory DSA 808-1 addressing this issue. Please see the referenced advisory for details on obtaining and applying the appropriate updates.


tDiary tDiary 2.0.1

• tDiary tdiary-full-2.0.2.tar.gz
  http://prdownloads.sourceforge.net/tdiary/tdiary-full-2.0.2.tar.gz?dow nload

tDiary tDiary 2.1.1

• tDiary tdiary-full-2.1.2.tar.gz
  http://prdownloads.sourceforge.net/tdiary/tdiary-full-2.1.2.tar.gz?dow nload