CVE-2015-5646

2015-10-1210:00:00

jpcert

www.cve.org

7.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.9%

JSON

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867.

References

jvn.jp/en/jp/JVN21025396/374951/index.html

jvn.jp/en/jp/JVN21025396/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000151

support.cybozu.com/ja-jp/article/8809

support.cybozu.com/ja-jp/article/8811