CVE-2013-0702

CVE-2013-0702 affects Cybozu Garoon 2.0.0 to 3.5.3 and is a Cross-site Scripting (XSS) vulnerability that allows an attacker to run arbitrary scripts in a user’s browser via unspecified vectors. The exploitation status is not clearly documented in the provided sources. Affected product details an...

CVE-2013-0701

SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege...

PT-2013-2539

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.5.0 through 3.5.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege. Recommendations For Cybozu Garoon versions 2.5.0 through 3.5.3, update to a...

CVE-2013-0702: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0701: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege...

PT-2013-2540

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.0.0 through 3.5.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Cybozu Garoon versions 2.0.0 through 3.5.3,...

Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon contains an SQL injection vulnerability. Cybozu Garoon provided by Cybozu is a groupware. Cybozu Garoon contains an SQL injection vulnerability. Ken Asai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Cybozu Garoon vulnerable to cross-site scripting

Overview Cybozu Garoon contains a cross-site scripting vulnerability. Cybozu Garoon provided by Cybozu is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Ken Asai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...

JVN#95863326: Cybozu Garoon vulnerable to cross-site scripting

Cybozu Garoon provided by Cybozu is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser when the user is assigned the "logging" permission. Solution Update the Software Update to the latest version accordin...

JVN#07629635: Cybozu Garoon vulnerable to SQL injection

Cybozu Garoon provided by Cybozu is a groupware. Cybozu Garoon contains an SQL injection vulnerability. Impact A user with the "logging" permission may obtain information managed by the product. Solution Update the Software Update to the latest version according to the information provided by the...

Cybozu Products Mail System Images Cross-Site Scripting Vulnerability

This host is running Cybozu Office, Cybozu Garoon, Cybozu Dezie or Cybozu MailWise and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozuproductsmailsystemxssvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Cybozu Products Mail System Images Cross-Site...

Cybozu Garoon Cross Site Scripting Vulnerability

This host is running Cybozu Garoon and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozugaroonxssvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Cybozu Garoon Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

Cybozu Products Mail System Images XSS Vulnerability

Cybozu Office, Cybozu Garoon, Cybozu Dezie or Cybozu MailWise is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cybozu Products Detection (HTTP)

HTTP based detection of various Cybozu products. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cybozu Garoon 2.0.0 - 2.1.3 XSS Vulnerability

Cybozu Garoon is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon...

CVE-2011-1333

Cross-site scripting XSS vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."...

CVE-2011-1334

Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...

CVE-2011-1332

Cross-site scripting XSS vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570...

Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570...

Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...