CVE-2008-6744

CVE-2008-6744 describes a Cross-Site Request Forgery (CSRF) in Cybozu products, notably Cybozu Office 6, Cybozu Dezie prior to 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3. The issue allows an attacker to hijack a user’s authenticated session to alter configuration settings when a logged-in us...