1922 matches found
CVE-2013-6902
This CVE affects Cybozu Garoon up to version 3.7.0, where the Space function is vulnerable to Cross-site Scripting (XSS). The root cause is unspecified vectors allowing remote attackers to inject arbitrary script/HTML, potentially executing in a user’s browser. Public sources (NVD/JVN) confirm mu...
CVE-2013-6905
CVE-2013-6905 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon phone component affecting Garoon 3.7.x and earlier when using Internet Explorer or Firefox. The exact vectors are unspecified in the provided sources, but the issue allows remote attackers to inject arbitrary web scr...
CVE-2013-6906
CVE-2013-6906 affects Cybozu Garoon prior to version 3.7.0, specifically a XSS vulnerability in the mail component when using Internet Explorer 6–8. An attacker could inject arbitrary script/HTML via unspecified vectors, potentially compromising user sessions or browser security. The connected JV...
CVE-2013-6907
CVE-2013-6907 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon mail component affecting Garoon 2.x and 3.x prior to 3.7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in an affected user’...
CVE-2013-6909
CVE-2013-6909 affects Cybozu Garoon prior to 3.7.0, where the report component is vulnerable to cross-site scripting (XSS) that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Affected product: Cybozu Garoon (groupware) before version 3.7.0. Root cause: XSS in ...
CVE-2013-6910
CVE-2013-6910 is a cross-site scripting (XSS) vulnerability in Cybozu Garoon’s Ajax components prior to 3.7.0. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors, potentially executing in a user’s browser. Affected product/version details are supported by mu...
CVE-2013-6908
Cybozu Garoon 3.x prior to 3.7.0 contains a cross‑site scripting (XSS) vulnerability in the mail component that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Exploitation status is not detailed in the provided documents. Affected product versions are Garo...
CVE-2013-6912
CVE-2013-6912 affects Cybozu Garoon’s calendar component (Cybozu Garoon) prior to version 3.7.2. The vulnerability enables cross-site scripting (XSS) when used with Internet Explorer 6–9 and authenticated remote access, allowing injection of arbitrary web script/HTML via unspecified vectors. The ...
CVE-2013-6912
Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6913
CVE-2013-6913 affects Cybozu Garoon (groupware) with a vulnerability in the search component that enables cross-site scripting (XSS) when using Internet Explorer. The issue targets Garoon versions before 3.7.2 and can be triggered by remote authenticated users via unspecified vectors, potentially...
CVE-2013-6914
CVE-2013-6914 concerns a Cross-site scripting (XSS) flaw in the calendar component of Cybozu Garoon (before 3.7.2). The vulnerability allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. Affected product: Cybozu Garoon 3.7 Service Pack 1 and earlier. Root cau...
CVE-2013-6904
CVE-2013-6904 is an XSS vulnerability in the Cybozu Garoon notes component (before 3.7.0) triggered when using Internet Explorer or Firefox. Public sources in connected documents confirm multiple cross-site scripting vulnerabilities in Cybozu Garoon and indicate that an arbitrary script could be ...
CVE-2013-6916
CVE-2013-6916 covers multiple XSS vulnerabilities in Cybozu Garoon’s Yahoo! UI Library prior to 3.7.2, exploitable when using IE9/10 or Chrome. Attackers could inject arbitrary script/HTML via unspecified vectors in the web application. Connected sources (JVN entries) confirm Cybozu Garoon 3.7.2-...
CVE-2013-6915
Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6903
The CVE-2013-6903 entry describes a Cross-site scripting (XSS) vulnerability in the scheduling component of Cybozu Garoon, affecting Garoon before 3.7.0. The issue can be triggered when using Internet Explorer or Firefox, allowing remote attackers to inject arbitrary web script or HTML via unspec...
CVE-2013-6001
Cybozu Garoon CVE-2013-6001 affects the Space function in Cybozu Garoon 3.7 and earlier. The vulnerability is an SQL injection that can be exploited by a user who can log in and is authenticated, allowing arbitrary SQL commands to be executed in the product’s database via unspecified vectors. Rem...
CVE-2013-6911
The CVE-2013-6911 entry documents a cross-site scripting (XSS) vulnerability in the bulletin-board component of Cybozu Garoon prior to 3.7.2. The issue can be exploited by remote authenticated users when using Internet Explorer or Firefox to inject arbitrary script/HTML via unspecified vectors. T...
CVE-2013-6914
Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6003
CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors...