CVE-2018-0607

CVE-2018-0607 affects Cybozu Garoon in the Notifications module (versions 3.5.0–4.6.2). The vulnerability is an SQL injection in the Notifications application that allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Root cause is a flaw in input handli...