CVE-2015-5646

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867...

Code injection

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867...

CVE-2015-5646

Summary: CVE-2015-5646 affects Cybozu Garoon 3.0.0–4.0.3, with remote authenticated PHP code execution via unspecified vectors. The vulnerability is documented across multiple sources (CVE/NVD, JVNDB/JVN, CNVD) and tied to CyVDB-863 and CyVDB-867. Affected versions: Garoon 3.x (up to 3.7.5) and 4...

CVE-2015-5646: Improper Control of Generation of Code

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867...