CVE-2013-6931

CVE-2013-6931 : SQL injection in the API of Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This is a separate issue from CVE-2013-6929. The vulnerability stems from the API surface in Cybozu Garoon 3.7.x prior to the 3...