Unscored CVE-2019-5934 EUVD-2019-15502GHSA-2c63-vgrp-m7w4

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL command…

Published May 17, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'.

Affected products

Vendor	Product	Affected	Fixed
Cybozu	Cybozu Garoon	4.0.0 to 4.10.0	—

References

http://jvn.jp/en/jp/JVN58849431/index.html
https://kb.cybozu.support/article/35306/