Lucene search
JpcertCVE-2013-6001HistoryDec 05, 2013 - 12:55 p.m.
CVE-2013-6001
2013-12-0512:55:30
CWE-89
jpcert
web.nvd.nist.gov
25
cve-2013-6001
sql injection
cybozu garoon
nvd
security vulnerability
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.002
Percentile
58.6%
SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
Node
cybozugaroonRange≤3.7
ORcybozugaroonMatch2.0sp1
ORcybozugaroonMatch2.0sp2
ORcybozugaroonMatch2.0sp3
ORcybozugaroonMatch2.0sp4
ORcybozugaroonMatch2.0sp5
ORcybozugaroonMatch2.0sp6
ORcybozugaroonMatch2.1
ORcybozugaroonMatch2.1sp1
ORcybozugaroonMatch2.1sp2
ORcybozugaroonMatch2.1sp3
ORcybozugaroonMatch2.5
ORcybozugaroonMatch2.5sp1
ORcybozugaroonMatch2.5sp2
ORcybozugaroonMatch2.5sp3
ORcybozugaroonMatch2.5sp4
ORcybozugaroonMatch3.0
ORcybozugaroonMatch3.0sp1
ORcybozugaroonMatch3.0sp2
ORcybozugaroonMatch3.0sp3
ORcybozugaroonMatch3.1
ORcybozugaroonMatch3.1sp1
ORcybozugaroonMatch3.1sp2
ORcybozugaroonMatch3.1sp3
ORcybozugaroonMatch3.5
ORcybozugaroonMatch3.5sp1
ORcybozugaroonMatch3.5sp2
ORcybozugaroonMatch3.5sp3
ORcybozugaroonMatch3.5sp4
ORcybozugaroonMatch3.5sp5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cybozu | garoon | * | cpe:2.3:a:cybozu:garoon:*:*:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:* |
| cybozu | garoon | 2.1 | cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:* |
| cybozu | garoon | 2.1 | cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:* |
| cybozu | garoon | 2.1 | cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-6001
2013-12-05 11:00:00
nvd
nvd
CVE-2013-6001
2013-12-05 12:55:30
jvn
jvn
JVN#82375148: Cybozu Garoon vulnerable to SQL injection
2013-12-03 00:00:00
prion
prion
Sql injection
2013-12-05 12:55:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.002
Percentile
58.6%
Related for CVE-2013-6001