Unscored CVE-2013-6929 EUVD-2013-6730GHSA-jwx8-hjqx-9w6g

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via cr…

Published Dec 28, 2013 · Updated Aug 6, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.

References

JVN#60997973 third-party-advisory
JVNDB-2013-000124 third-party-advisory
https://support.cybozu.com/ja-jp/article/7889