CVE-2016-7803

CVE-2016-7803 is a SQL injection in Cybozu Garoon 3.0.0 through 4.2.2, caused by the MultiReport function. The flaw allows remote authenticated users to execute arbitrary SQL commands against the underlying database. Affected software: Cybozu Garoon 3.0.0–4.2.2 (per multiple sources). Root cause ...