CVE-2011-1333

CVE-2011-1333 affects Cybozu Office 6 and Cybozu Garoon 2.0.0–2.1.3. It is a cross-site scripting (XSS) vulnerability exposed by an issue during downloading graphic files from the bulletin board system, allowing arbitrary script execution in a logged-in user’s browser. The remediation guidance in...

CVE-2011-1333

Cross-site scripting XSS vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."...

CVE-2011-1335

CVE-2011-1335 – Cybozu Office XSS: A cross-site scripting vulnerability exists in Cybozu Office 6.x, 7, and 8 prior to 8.1.1, enabling remote attackers to inject arbitrary script/HTML via the address book and user list functions. The underlying issue is a failure to properly sanitize user-supplie...

CVE-2011-1334

Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...

CVE-2011-1335

Cross-site scripting XSS vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."...

Cybozu Office vulnerable to cross-site scripting

Overview Cybozu Office contains a cross-site scripting vulnerability. Cybozu Office is a groupware. Cybozu Office contains a cross-site scripting vulnerability due to issues contained in the address book and user list functions. NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC...

Multiple Cybozu products vulnerable to cross-site scripting

Overview Multiple products provided by Cybozu, Inc. contain a cross-site scripting vulnerability. Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the mail system. Sen UENO of Tricorder Co. Ltd. reported...

Multiple Cybozu products vulnerable to cross-site scripting

Overview Multiple products provided by Cybozu, Inc. contain a cross-site scripting vulnerability. Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the bulletin board system. Sen UENO of Tricorder Co. Ltd...

Cybozu Garoon vulnerable to cross-site scripting

Overview Cybozu Garoon contains a cross-site scripting vulnerability. Cybozu Garoon is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#54074460: Multiple Cybozu products vulnerable to cross-site scripting

Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the mail system. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the lates...

JVN#80877328: Multiple Cybozu products vulnerable to cross-site scripting

Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the bulletin board system. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to...

JVN#59779256: Cybozu Garoon vulnerable to cross-site scripting

Cybozu Garoon is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the latest version according to the information provided by the developer...

JVN#55508059: Cybozu Office vulnerable to cross-site scripting

Cybozu Office is a groupware. Cybozu Office contains a cross-site scripting vulnerability due to issues contained in the address book and user list functions. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the late...

Cybozu Office Authentication Bypass Vulnerability (Windows)

This host is installed with Cybozu Office and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozuofficeauthbypassvulnwin.nasl 5394 2017-02-22 09:22:42Z teissa $ Cybozu Office Authentication Bypass Vulnerability Windows Authors: Madhuri D Copyright:...

Cybozu Office Authentication Bypass Vulnerability (Linux)

This host is installed with Cybozu Office and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozuofficeauthbypassvulnlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ Cybozu Office Authentication Bypass Vulnerability Linux Authors: Madhuri D Copyright:...

Cybozu Office Authentication Bypass Vulnerability - Linux

Cybozu Office is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cybozu Office Authentication Bypass Vulnerability - Windows

Cybozu Office is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2029

Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone...

CVE-2010-2029

Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone...

CVE-2010-2029

CVE-2010-2029 affects Cybozu Office products (notably Cybozu Office Ktai and Cybozu dotSales). The issue is an authentication bypass caused by improper restriction of the login page, enabling remote attackers to bypass login using the user’s mobile ID and potentially view or modify sensitive data...