Skip to content
OpenAdvisories
Unscored CVE-2016-7803 EUVD-2016-8652GHSA-9j52-738j-792q

SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via…

Published Jun 9, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Cybozu Product: Cybozu Garoon

Description

SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function.

Affected products

VendorProductAffectedFixed
Cybozu Cybozu Garoon 3.0.0 to 4.2.2 —

References