2700 matches found
CVE-2006-4490
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. dot dot sequence via the id parameter in 1 scripts/cbag/ag.exe or 2 scripts/s360v2/s360.exe...
CVE-2006-4490
CVE-2006-4490 affects Cybozu Office (pre-6.6 Build 1.3) and Share 360 (pre-2.5 Build 0.3). Affected components allow directory traversal via the id parameter in scripts/cbag/ag.exe or scripts/s360v2/s360.exe, enabling remote authenticated users to read arbitrary files. Root cause: improper valida...
CVE-2006-4491
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...
CVE-2006-4492
CVE-2006-4492 concerns an information-disclosure vulnerability in Cybozu Office 6 that could allow a remote attacker to obtain information about registered users and groups. The connected JVN entry for Cybozu Office 6 (2006-000649) describes the impact as disclosure of user/group information and ...
CVE-2006-4491
Summary: Cybozu products (Collaborex, AG before 1.2(1.5); AG Pocket before 5.2(0.8); Mailwise before 3.0(0.3); Garoon 1 before 1.5(4.1)) are vulnerable to a directory traversal flaw that allows remote authenticated users to read arbitrary files via unspecified vectors. Impact: partial confidentia...
CVE-2006-4444
Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...
CVE-2006-4444
Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...
CVE-2006-4444
CVE-2006-4444 affects Cybozu Garoon 2.1.0 for Windows with multiple SQL injection vulnerabilities exploitable by remote authenticated users to execute arbitrary SQL commands via parameters: tid in todo/view/modify/delete; pid in workflow/view/print; uid in schedule/user_view, phonemessage/add/his...
[Full-disclosure] [vuln.sg] Cybozu Garoon 2 SQL Injection Vulnerabilities
vuln.sg Vulnerability Research Advisory Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary ------- Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...
JVN#90420168: Cybozu products vulnerable to directory traversal
Impact A remote authenticated attacker could read an arbitrary file on the server. The files that can be viewed by an attacker depend on the environment where the Cybozu products are installed. Solution Products Affected Cybozu Office 6 5 1.2 and earlier Cybozu Garoon 1.5 4.0 and earlier...
Cybozu Products (id) Arbitrary File Retrieval Vulnerability
No description provided by source. Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files accessible to...
JVN#31125599 Cybozu Office 6 information disclosure vulnerability
Impact A remote attacker could obtain information on registered users and groups. Solution Products Affected Cybozu Office 6 6.51.2 and earlier...
Cybozu Products (id) Arbitrary File Retrieval Vulnerability
Exploit for cgi platform in category web applications =========================================================== Cybozu Products id Arbitrary File Retrieval Vulnerability =========================================================== Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Che...
Cybozu Products - id Arbitrary File Retrieval
Cybozu Products - id Arbitrary File Retrieval Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files...
Cybozu Products - 'id' Arbitrary File Retrieval
Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files accessible to the web server process. Tested...
Cybuzu Garoon 2.1.0 - Multiple SQL Injections
Cybuzu Garoon 2.1.0 - Multiple SQL Injections Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...
[Full-disclosure] [vuln.sg] Cybozu Products Arbitrary File Retrieval Vulnerability
vuln.sg Vulnerability Research Advisory Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary ------- A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files...
CVE-2002-1960
Cross-site scripting XSS vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link...
CVE-2002-1960
CVE-2002-1960 concerns a cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 . The flaw allows remote attackers to inject arbitrary web script or HTML via an HTML link. According to NVD, the vulnerability has a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N) with no confidential...