Cross site scripting

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Crlf injection

CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors...

CVE-2013-6903

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6004

Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6900

Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6905

Cross-site scripting XSS vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6907

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6915

CVE-2013-6915 is a cross-site scripting (XSS) vulnerability in the system-administration component of Cybozu Garoon up to version 3.7.2 (i.e., affected product: Cybozu Garoon; vulnerable version: before 3.7.2). The provided connected documents consistently describe multiple XSS flaws that allow r...

CVE-2013-6904

Cross-site scripting XSS vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6003

CVE-2013-6003 affects Cybozu Garoon 3.1–3.5 SP5. A CRLF injection vulnerability exists in the Phone Messages forwarding feature that allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors. The root cause is improper handling of header data during mail forward...

CVE-2013-6002

CVE-2013-6002: Cybozu Garoon server prior to 3.7 SP1 is vulnerable to DoS (high CPU usage) via unspecified vectors. Affected: Cybozu Garoon 3.7 and earlier. Root cause details are not publicly disclosed in the provided documents. Remedy: update to the latest Cybozu Garoon version per vendor advis...

CVE-2013-6004

Summary: CVE-2013-6004 describes a session fixation vulnerability in Cybozu Garoon version before 3.7.2. An unauthenticated remote attacker could impersonate a registered user and hijack web sessions via unspecified vectors. Affected software: Cybozu Garoon 3.7 (and earlier) as indicated by JVN/N...

CVE-2013-6900

The CVE-2013-6900 entry affects Cybozu Garoon with an XSS vulnerability in the system-administration component prior to 3.7.0. Multiple connected sources confirm a remote attacker could inject arbitrary script/HTML via unspecified vectors, potentially enabling script execution in a user’s browser...

CVE-2013-6901

CVE-2013-6901 is an XSS vulnerability in the Space feature of Cybozu Garoon prior to 3.7.0 that can be triggered when using Firefox, allowing remote script/HTML injection via unspecified vectors. The issue affects Cybozu Garoon versions before 3.7.0; multiple connected sources (JVN/JVNDB, CVE lis...

CVE-2013-6902

This CVE affects Cybozu Garoon up to version 3.7.0, where the Space function is vulnerable to Cross-site Scripting (XSS). The root cause is unspecified vectors allowing remote attackers to inject arbitrary script/HTML, potentially executing in a user’s browser. Public sources (NVD/JVN) confirm mu...

CVE-2013-6905

CVE-2013-6905 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon phone component affecting Garoon 3.7.x and earlier when using Internet Explorer or Firefox. The exact vectors are unspecified in the provided sources, but the issue allows remote attackers to inject arbitrary web scr...

CVE-2013-6906

CVE-2013-6906 affects Cybozu Garoon prior to version 3.7.0, specifically a XSS vulnerability in the mail component when using Internet Explorer 6–8. An attacker could inject arbitrary script/HTML via unspecified vectors, potentially compromising user sessions or browser security. The connected JV...

CVE-2013-6907

CVE-2013-6907 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon mail component affecting Garoon 2.x and 3.x prior to 3.7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in an affected user’...