Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon contains a SQL injection vulnerability. Note that this vulnerability is different from JVN91153528. Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the process of downloading files, which may result in SQL injection. Impact A user w...

Cybozu Garoon vulnerable to session management

Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a vulnerability in session management. Impact A user who can log in to the product may impersonate an arbitrary user. As a result, information may be altered or disclosed. Solution For Cybozu Garoon 3.7: Apply...

JVN#71045461: Cybozu Garoon vulnerable to SQL injection

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the process of downloading files, which may result in SQL injection. Impact A user who can log in to the system may obtain or alter information on the system. Solution For Cybozu Garoon 3.7: Apply the Patch...

JVN#26393529: Cybozu Garoon vulnerable to directory traversal

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a directory traversal vulnerability in the process of downloading files. Impact A user who can log in to the product may obtain files on the server. Solution For Cybozu Garoon 3.7: Apply the Patch Apply the appropriate...

JVN#24035499: Cybozu Garoon vulnerable to session management

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains a vulnerability in session management. Impact A user who can log in to the product may impersonate an arbitrary user. As a result, information may be altered or disclosed. Solution For Cybozu Garoon 3.7: Apply the Patch...

Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)

An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2013-6930

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

CVE-2013-6931

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

Sql injection

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

Sql injection

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

CVE-2013-6930

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

CVE-2013-6930

CVE-2013-6930 is a SQL injection vulnerability in the page-navigation component of Cybozu Garoon. Affected are Cybozu Garoon versions 2.0.0–2.0.6, 2.1.0–2.1.3, 2.5.0–2.5.4, 3.0.0–3.0.3, 3.5.0–3.5.5, and 3.7.x before 3.7.3. Remote authenticated users may execute arbitrary SQL commands via unspecif...

CVE-2013-6931

CVE-2013-6931 : SQL injection in the API of Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This is a separate issue from CVE-2013-6929. The vulnerability stems from the API surface in Cybozu Garoon 3.7.x prior to the 3...

CVE-2013-6931

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

PT-2014-3219

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.0.0 through 2.0.6 Cybozu Garoon versions 2.1.0 through 2.1.3 Cybozu Garoon versions 2.5.0 through 2.5.4 Cybozu Garoon versions 3.0.0 through 3.0.3 Cybozu Garoon versions 3.5.0 through 3.5.5 Cybozu Garoon versions 3.7.x...

PT-2014-3220

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.7.x through 3.7.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Recommendations For Cybozu Garoon versions 3.7.x through 3.7.2, update to version 3.7...

CVE-2013-6930: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

CVE-2013-6931: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

Multiple SQL injection vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon contains multiple SQL injection vulnerabilities. Cybozu Garoon contains issues in the process of page navigation link and input through API, which may result in SQL injection. Note that this vulnerability is different from JVN60997973. Impact A user who can log in to the...

JVN#91153528: Multiple SQL injection vulnerabilities in Cybozu Garoon

Cybozu Garoon contains issues in the process of page navigation link and input through API, which may result in SQL injection. Impact A user who can log in to the system may obtain or alter data in the database. Solution Apply the Patch Apply the appropriate patch according to the information...