Description
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867.
References
- https://support.cybozu.com/ja-jp/article/8811
- JVNDB-2015-000151 third-party-advisory
- JVN#21025396 third-party-advisory
- http://jvn.jp/en/jp/JVN21025396/374951/index.html
- https://support.cybozu.com/ja-jp/article/8809