Description
The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-866.
References
- JVNDB-2015-000151 third-party-advisory
- https://support.cybozu.com/ja-jp/article/8810
- JVN#21025396 third-party-advisory
- http://jvn.jp/en/jp/JVN21025396/374951/index.html