CVE-2013-6001

Cybozu Garoon < 3.7 SP1 - Authenticated SQL Injection via Space Function

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_confirm
https://support.cybozu.com/ja-jp/article/6955
Third Party Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000114
Various Sources x_refsource_confirm
http://cs.cybozu.co.jp/information/20131202up01.php
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN82375148/index.html

Scores

EPSS 0.0039
EPSS Percentile 60.2%

Details

CWE
CWE-89
Status published
Products (7)
cybozu/garoon 2.0 sp1 (6 CPE variants)
cybozu/garoon 2.1 (4 CPE variants)
cybozu/garoon 2.5 (5 CPE variants)
cybozu/garoon 3.0 (4 CPE variants)
cybozu/garoon 3.1 (4 CPE variants)
cybozu/garoon 3.5 (6 CPE variants)
cybozu/garoon < 3.7
Published Dec 05, 2013
Tracked Since Feb 18, 2026