CVE-2006-4444

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...

CVE-2006-4444

CVE-2006-4444 affects Cybozu Garoon 2.1.0 for Windows with multiple SQL injection vulnerabilities exploitable by remote authenticated users to execute arbitrary SQL commands via parameters: tid in todo/view/modify/delete; pid in workflow/view/print; uid in schedule/user_view, phonemessage/add/his...

[Full-disclosure] [vuln.sg] Cybozu Garoon 2 SQL Injection Vulnerabilities

vuln.sg Vulnerability Research Advisory Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary ------- Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...

Cybuzu Garoon 2.1.0 - Multiple SQL Injections

Cybuzu Garoon 2.1.0 - Multiple SQL Injections Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...