JVN#54074460: Multiple Cybozu products vulnerable to cross-site scripting

Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the mail system. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to the lates...

JVN#23108985: Multiple Cybozu products vulnerable to cross-site scripting

Multiple products groupware etc. provided by Cybozu, Inc. contain a cross-site scripting vulnerablility. This vulnerability is different from JVN50342989, and JVN90712589. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest versi...

CVE-2006-4491

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2006-4491

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2006-4491

Summary: Cybozu products (Collaborex, AG before 1.2(1.5); AG Pocket before 5.2(0.8); Mailwise before 3.0(0.3); Garoon 1 before 1.5(4.1)) are vulnerable to a directory traversal flaw that allows remote authenticated users to read arbitrary files via unspecified vectors. Impact: partial confidentia...