CVE-2013-6901

CVE-2013-6901 is an XSS vulnerability in the Space feature of Cybozu Garoon prior to 3.7.0 that can be triggered when using Firefox, allowing remote script/HTML injection via unspecified vectors. The issue affects Cybozu Garoon versions before 3.7.0; multiple connected sources (JVN/JVNDB, CVE lis...

CVE-2013-6910

CVE-2013-6910 is a cross-site scripting (XSS) vulnerability in Cybozu Garoon’s Ajax components prior to 3.7.0. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors, potentially executing in a user’s browser. Affected product/version details are supported by mu...

CVE-2013-6902

This CVE affects Cybozu Garoon up to version 3.7.0, where the Space function is vulnerable to Cross-site Scripting (XSS). The root cause is unspecified vectors allowing remote attackers to inject arbitrary script/HTML, potentially executing in a user’s browser. Public sources (NVD/JVN) confirm mu...

CVE-2013-6907

CVE-2013-6907 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon mail component affecting Garoon 2.x and 3.x prior to 3.7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in an affected user’...

CVE-2013-6904

CVE-2013-6904 is an XSS vulnerability in the Cybozu Garoon notes component (before 3.7.0) triggered when using Internet Explorer or Firefox. Public sources in connected documents confirm multiple cross-site scripting vulnerabilities in Cybozu Garoon and indicate that an arbitrary script could be ...

CVE-2013-6914

CVE-2013-6914 concerns a Cross-site scripting (XSS) flaw in the calendar component of Cybozu Garoon (before 3.7.2). The vulnerability allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. Affected product: Cybozu Garoon 3.7 Service Pack 1 and earlier. Root cau...

CVE-2013-6900

The CVE-2013-6900 entry affects Cybozu Garoon with an XSS vulnerability in the system-administration component prior to 3.7.0. Multiple connected sources confirm a remote attacker could inject arbitrary script/HTML via unspecified vectors, potentially enabling script execution in a user’s browser...

CVE-2013-6911

The CVE-2013-6911 entry documents a cross-site scripting (XSS) vulnerability in the bulletin-board component of Cybozu Garoon prior to 3.7.2. The issue can be exploited by remote authenticated users when using Internet Explorer or Firefox to inject arbitrary script/HTML via unspecified vectors. T...

CVE-2013-6915

Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6909

Cross-site scripting XSS vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6913

Cross-site scripting XSS vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6004

Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6906

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6001

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6912

CVE-2013-6912 affects Cybozu Garoon’s calendar component (Cybozu Garoon) prior to version 3.7.2. The vulnerability enables cross-site scripting (XSS) when used with Internet Explorer 6–9 and authenticated remote access, allowing injection of arbitrary web script/HTML via unspecified vectors. The ...

CVE-2013-6905

Cross-site scripting XSS vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6906

CVE-2013-6906 affects Cybozu Garoon prior to version 3.7.0, specifically a XSS vulnerability in the mail component when using Internet Explorer 6–8. An attacker could inject arbitrary script/HTML via unspecified vectors, potentially compromising user sessions or browser security. The connected JV...

CVE-2013-6003: Improper Input Validation

CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors...

CVE-2013-6916: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6915: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...