JVN#52363223: Cybozu Garoon vulnerable to arbitrary script execution

Cybozu Garoon, a groupware from Cybozu, contains a vulnerability that allows an attacker to execute an arbitrary script when a user views RSS feed. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the vendor...

JVN#50342989 Multiple Cybozu products vulnerable to cross-site scripting

Multiple Cybozu products are vulnerable to cross-site scripting. This vulnerability is different from JVN90712589. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the vendor. Products Affected Cybozu Office 6....

JVN#90712589 Multiple Cybozu products vulnerable to cross-site scripting

Multiple Cybozu products are vulnerable to cross-site scripting. This vulnerability is different from JVN50342989. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the vendor. Products Affected Cybozu Office 6....

Cybozu Garoon SQL注入漏洞

Cybozu Garoon是一款基于PHP的WEB应用程序。 Cybozu Garoon不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Cybozu Garoon 2.1 http://garoon.cybozu.co.jp/ http://www.example.com/scripts/cbgrn/grn.exe/todo/index?cid=SQL...

CVE-2006-4491

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2006-4491

Summary: Cybozu products (Collaborex, AG before 1.2(1.5); AG Pocket before 5.2(0.8); Mailwise before 3.0(0.3); Garoon 1 before 1.5(4.1)) are vulnerable to a directory traversal flaw that allows remote authenticated users to read arbitrary files via unspecified vectors. Impact: partial confidentia...

CVE-2006-4491

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2006-4491: Undefined Security Weakness

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2006-4444

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...

CVE-2006-4444

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...

CVE-2006-4444

CVE-2006-4444 affects Cybozu Garoon 2.1.0 for Windows with multiple SQL injection vulnerabilities exploitable by remote authenticated users to execute arbitrary SQL commands via parameters: tid in todo/view/modify/delete; pid in workflow/view/print; uid in schedule/user_view, phonemessage/add/his...

CVE-2006-4444: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...

[Full-disclosure] [vuln.sg] Cybozu Garoon 2 SQL Injection Vulnerabilities

vuln.sg Vulnerability Research Advisory Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary ------- Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...

Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL statements which...

Cybuzu Garoon 2.1.0 - Multiple SQL Injections

Cybuzu Garoon 2.1.0 - Multiple SQL Injections Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...

Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities

Exploit for cgi platform in category web applications ================================================================= Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities ================================================================= Cybozu Garoon 2 SQL Injection Vulnerabilities...

Cybuzu Garoon 2.1.0 - Multiple SQL Injections

Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL statements which can lead to disclosure of...