1663 matches found
Cybozu Garoon vulnerable to session management
Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a vulnerability in session management. Impact A user who can log in to the product may impersonate an arbitrary user. As a result, information may be altered or disclosed. Solution For Cybozu Garoon 3.7: Apply...
JVN#26393529: Cybozu Garoon vulnerable to directory traversal
Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a directory traversal vulnerability in the process of downloading files. Impact A user who can log in to the product may obtain files on the server. Solution For Cybozu Garoon 3.7: Apply the Patch Apply the appropriate...
JVN#24035499: Cybozu Garoon vulnerable to session management
Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a vulnerability in session management. Impact A user who can log in to the product may impersonate an arbitrary user. As a result, information may be altered or disclosed. Solution For Cybozu Garoon 3.7: Apply the Patch...
JVN#71045461: Cybozu Garoon vulnerable to SQL injection
Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the process of downloading files, which may result in SQL injection. Impact A user who can log in to the system may obtain or alter information on the system. Solution For Cybozu Garoon 3.7: Apply the Patch...
Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)
An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2013-6931
SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...
CVE-2013-6930
SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...
Sql injection
SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...
Sql injection
SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...
CVE-2013-6930
SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...
CVE-2013-6931
SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...
CVE-2013-6930
CVE-2013-6930 is a SQL injection vulnerability in the page-navigation component of Cybozu Garoon. Affected are Cybozu Garoon versions 2.0.0–2.0.6, 2.1.0–2.1.3, 2.5.0–2.5.4, 3.0.0–3.0.3, 3.5.0–3.5.5, and 3.7.x before 3.7.3. Remote authenticated users may execute arbitrary SQL commands via unspecif...
CVE-2013-6931
CVE-2013-6931 : SQL injection in the API of Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This is a separate issue from CVE-2013-6929. The vulnerability stems from the API surface in Cybozu Garoon 3.7.x prior to the 3...
Multiple SQL injection vulnerabilities in Cybozu Garoon
Overview Cybozu Garoon contains multiple SQL injection vulnerabilities. Cybozu Garoon contains issues in the process of page navigation link and input through API, which may result in SQL injection. Note that this vulnerability is different from JVN60997973. Impact A user who can log in to the...
JVN#91153528: Multiple SQL injection vulnerabilities in Cybozu Garoon
Cybozu Garoon contains issues in the process of page navigation link and input through API, which may result in SQL injection. Impact A user who can log in to the system may obtain or alter data in the database. Solution Apply the Patch Apply the appropriate patch according to the information...
Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)
An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Cybozu Garoon未明SQL注入漏洞
Bugtraq ID:64531 CVE ID:CVE-2013-6929 Cybozu Garoon是基于Web的局域网解决方案。 Cybozu Garoon存在一个SQL注入漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，可查询或获取数据库信息。 0 Cybozu Garoon 3.5 - 3.7 Service Pack 2 厂商补丁： Cybozu ----- 用户可联系厂商获得相应的升级程序或补丁： https://support.cybozu.com/ja-jp/article/7889...
Cybozu Garoon Keitai验证绕过漏洞
Bugtraq ID:64532 CVE ID:CVE-2013-6006 Cybozu Garoon是基于Web的局域网解决方案。 Cybozu Garoon存在安全漏洞，允许远程攻击者利用漏洞绕过验证，当攻击者发送特制的包含Keitai启用的用户ID的请求，可绕过Keitai验证，允许攻击者未授权访问应用信息。 0 Cybozu Garoon 3.5 - 3.7 Service Pack 2 厂商补丁： Cybozu ----- 用户可参考如下厂商提供的安全公告获得补丁信息： https://support.cybozu.com/ja-jp/article/7893...