Webservice-DIC yoyaku_v41 Input Validation Vulnerability

Webservice-DIC yoyakuv41 is a conference room reservation management software from Webservice-DIC. Webservice-DIC yoyakuv41 fails to properly filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting a special request to create arbitrary files...

Webservice-DIC yoyaku_v41 OS Command Injection Vulnerability

Webservice-DIC yoyakuv41 is a conference room reservation management software from Webservice-DIC. Webservice-DIC yoyakuv41 fails to properly filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary operating system...

Webservice-DIC yoyaku_v41 Unauthorized Operation Vulnerability

Webservice-DIC yoyakuv41 is a conference room reservation management software from Webservice-DIC. Webservice-DIC yoyakuv41 fails to properly filter user-submitted input, which allows remote attackers to bypass authentication by submitting a special request to complete a conference room reservati...

yoyaku_v41 vulnerable to OS command injection

Overview yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains an OS command injection vulnerability CWE-78. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

yoyaku_v41 vulnerable to authentication bypass

Overview yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains an authentication bypass vulnerability CWE-592. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

PT-2015-6024

Name of the Vulnerable Software and Affected Versions Webservice-DIC yoyaku version v41 Description The issue allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors. Recommendations For Webservice-DIC yoyaku version v41, at the moment,...

PT-2015-6026

Name of the Vulnerable Software and Affected Versions Webservice-DIC yoyaku version v41 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For version v41, update to a version that contains a fix for this issue, if available. At the moment, there is no...

PT-2015-6025

Name of the Vulnerable Software and Affected Versions Webservice-DIC yoyaku version v41 Description The issue allows remote attackers to bypass authentication, enabling them to complete a conference-room reservation. This can be achieved through unspecified vectors, resulting in an "unintentional...