Cross site scripting

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6910

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6908

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6914

Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6916

Cross-site scripting XSS vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6900

Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6913

CVE-2013-6913 affects Cybozu Garoon (groupware) with a vulnerability in the search component that enables cross-site scripting (XSS) when using Internet Explorer. The issue targets Garoon versions before 3.7.2 and can be triggered by remote authenticated users via unspecified vectors, potentially...

CVE-2013-6909

CVE-2013-6909 affects Cybozu Garoon prior to 3.7.0, where the report component is vulnerable to cross-site scripting (XSS) that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Affected product: Cybozu Garoon (groupware) before version 3.7.0. Root cause: XSS in ...

CVE-2013-6911

Cross-site scripting XSS vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6003

CVE-2013-6003 affects Cybozu Garoon 3.1–3.5 SP5. A CRLF injection vulnerability exists in the Phone Messages forwarding feature that allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors. The root cause is improper handling of header data during mail forward...

CVE-2013-6905

CVE-2013-6905 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon phone component affecting Garoon 3.7.x and earlier when using Internet Explorer or Firefox. The exact vectors are unspecified in the provided sources, but the issue allows remote attackers to inject arbitrary web scr...

CVE-2013-6915

CVE-2013-6915 is a cross-site scripting (XSS) vulnerability in the system-administration component of Cybozu Garoon up to version 3.7.2 (i.e., affected product: Cybozu Garoon; vulnerable version: before 3.7.2). The provided connected documents consistently describe multiple XSS flaws that allow r...

CVE-2013-6004

Summary: CVE-2013-6004 describes a session fixation vulnerability in Cybozu Garoon version before 3.7.2. An unauthenticated remote attacker could impersonate a registered user and hijack web sessions via unspecified vectors. Affected software: Cybozu Garoon 3.7 (and earlier) as indicated by JVN/N...

CVE-2013-6002

The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

CVE-2013-6002

CVE-2013-6002: Cybozu Garoon server prior to 3.7 SP1 is vulnerable to DoS (high CPU usage) via unspecified vectors. Affected: Cybozu Garoon 3.7 and earlier. Root cause details are not publicly disclosed in the provided documents. Remedy: update to the latest Cybozu Garoon version per vendor advis...

CVE-2013-6903

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...