Sql injection

2019-05-1716:29:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

JSON

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application ‘logging’.

CPENameOperatorVersion
garoonge4.0.0
garoonle4.10.0

CPE	Name	Operator	Version
	garoon	ge	4.0.0
	garoon	le	4.10.0

References

jvn.jp/en/jp/JVN58849431/index.html

kb.cybozu.support/article/35306/