2048 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."...
CVE-2011-1332
Cross-site scripting XSS vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570...
CVE-2011-1333
Cross-site scripting XSS vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."...
CVE-2011-1334
Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...
CVE-2011-1332
CVE-2011-1332: A cross-site scripting (XSS) vulnerability affects Cybozu Garoon versions 2.0.0 through 2.1.3. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists CVSSv2 base metrics: AV:N/AC:M/Au:N/C:N/I:P/A:N with a base s...
CVE-2011-1333
CVE-2011-1333 affects Cybozu Office 6 and Cybozu Garoon 2.0.0–2.1.3. It is a cross-site scripting (XSS) vulnerability exposed by an issue during downloading graphic files from the bulletin board system, allowing arbitrary script execution in a logged-in user’s browser. The remediation guidance in...
PT-2011-3064
Name of the Vulnerable Software and Affected Versions Cybozu Office 6 Cybozu Garoon versions 2.0.0 through 2.1.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to downloading graphic files from the bulletin board...
PT-2011-3063
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.0.0 through 2.1.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.0.0 through 2.1.3, update to a versi...
CVE-2011-1332: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570...
CVE-2011-1333: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."...
CVE-2011-1334: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...
Cybozu Garoon vulnerable to cross-site scripting
Overview Cybozu Garoon contains a cross-site scripting vulnerability. Cybozu Garoon is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
JVN#54074460: Multiple Cybozu products vulnerable to cross-site scripting
Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the mail system. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the lates...
JVN#59779256: Cybozu Garoon vulnerable to cross-site scripting
Cybozu Garoon is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the latest version according to the information provided by the developer...
JVN#80877328: Multiple Cybozu products vulnerable to cross-site scripting
Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the bulletin board system. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to...
CVE-2008-6744
CVE-2008-6744 describes a Cross-Site Request Forgery (CSRF) in Cybozu products, notably Cybozu Office 6, Cybozu Dezie prior to 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3. The issue allows an attacker to hijack a user’s authenticated session to alter configuration settings when a logged-in us...
CVE-2008-6744: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Cybozu Office 6, Cybozu Dezie before 6.01.0, and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Session fixation
Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page...
Cross site scripting
Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
