CVE-2013-6931

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

CVE-2013-6930

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

Sql injection

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

Sql injection

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

CVE-2013-6931

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929...

CVE-2013-6930

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

CVE-2013-6930

CVE-2013-6930 is a SQL injection vulnerability in the page-navigation component of Cybozu Garoon. Affected are Cybozu Garoon versions 2.0.0–2.0.6, 2.1.0–2.1.3, 2.5.0–2.5.4, 3.0.0–3.0.3, 3.5.0–3.5.5, and 3.7.x before 3.7.3. Remote authenticated users may execute arbitrary SQL commands via unspecif...

CVE-2013-6931

CVE-2013-6931 : SQL injection in the API of Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This is a separate issue from CVE-2013-6929. The vulnerability stems from the API surface in Cybozu Garoon 3.7.x prior to the 3...

Multiple SQL injection vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon contains multiple SQL injection vulnerabilities. Cybozu Garoon contains issues in the process of page navigation link and input through API, which may result in SQL injection. Note that this vulnerability is different from JVN60997973. Impact A user who can log in to the...

JVN#91153528: Multiple SQL injection vulnerabilities in Cybozu Garoon

Cybozu Garoon contains issues in the process of page navigation link and input through API, which may result in SQL injection. Impact A user who can log in to the system may obtain or alter data in the database. Solution Apply the Patch Apply the appropriate patch according to the information...

Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)

An SQL injection vulnerability has been reported in Cybozu Garoon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Cybozu Garoon未明SQL注入漏洞

Bugtraq ID:64531 CVE ID:CVE-2013-6929 Cybozu Garoon是基于Web的局域网解决方案。 Cybozu Garoon存在一个SQL注入漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，可查询或获取数据库信息。 0 Cybozu Garoon 3.5 - 3.7 Service Pack 2 厂商补丁： Cybozu ----- 用户可联系厂商获得相应的升级程序或补丁： https://support.cybozu.com/ja-jp/article/7889...

Cybozu Garoon Keitai验证绕过漏洞

Bugtraq ID:64532 CVE ID:CVE-2013-6006 Cybozu Garoon是基于Web的局域网解决方案。 Cybozu Garoon存在安全漏洞，允许远程攻击者利用漏洞绕过验证，当攻击者发送特制的包含Keitai启用的用户ID的请求，可绕过Keitai验证，允许攻击者未授权访问应用信息。 0 Cybozu Garoon 3.5 - 3.7 Service Pack 2 厂商补丁： Cybozu ----- 用户可参考如下厂商提供的安全公告获得补丁信息： https://support.cybozu.com/ja-jp/article/7893...

CVE-2013-6929

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input...

Sql injection

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input...

CVE-2013-6929

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input...

CVE-2013-6929

CVE-2013-6929 (Cybozu Garoon) is a SQL injection vulnerability affecting Cybozu Garoon 3.7 SP2 and earlier, exploitable by remote authenticated users via crafted API input to execute arbitrary SQL commands. Related entries (CVE-2013-6930/6931) describe additional SQL injection issues in Garoon co...

CVE-2013-6006

Cybozu Garoon Keitai authentication bypass (CVE-2013-6006) is documented for Cybozu Garoon 3.5–3.7 SP2. A remote attacker can bypass Keitai authentication by sending a request with a modified user ID, potentially exposing information accessible to that user. Public sources (JVN/JVNDB/Seebug, NVD)...

CVE-2013-6006

Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request...

Cybozu Garoon Keitai vulnerable to authentication bypass

Overview Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon Keitai contains an authentication bypass vulnerability. Impact When an attacker sends a specially crafted request that includes a user ID for a user that has the Keitai function enabled, authentication using Keitai may b...