Unscored CVE-2013-6001 EUVD-2013-5831GHSA-q32j-wgmf-qxj2

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQ…

Published Dec 5, 2013 · Updated Aug 6, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

https://support.cybozu.com/ja-jp/article/6955
http://products.cybozu.co.jp/garoon/download/update/gr3/fix371sp1.html
JVNDB-2013-000114 third-party-advisory
http://cs.cybozu.co.jp/information/20131202up01.php
JVN#82375148 third-party-advisory