Lucene search

JpcertCVE-2013-6930

HistoryJan 29, 2014 - 5:37 a.m.

CVE-2013-6930

2014-01-2905:37:02

CWE-89

jpcert

web.nvd.nist.gov

cybozu garoon

sql injection

vulnerability

cve-2013-6930

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.003

Percentile

69.6%

JSON

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929.

Affected configurations

Nvd

Node

cybozugaroonMatch2.0sp1

cybozugaroonMatch2.0sp2

cybozugaroonMatch2.0sp3

cybozugaroonMatch2.0sp4

cybozugaroonMatch2.0sp5

cybozugaroonMatch2.0sp6

cybozugaroonMatch2.0.0

cybozugaroonMatch2.0.1

cybozugaroonMatch2.0.2

cybozugaroonMatch2.0.3

cybozugaroonMatch2.0.4

cybozugaroonMatch2.0.5

cybozugaroonMatch2.0.6

cybozugaroonMatch2.1sp1

cybozugaroonMatch2.1sp2

cybozugaroonMatch2.1sp3

cybozugaroonMatch2.1.0

cybozugaroonMatch2.1.1

cybozugaroonMatch2.1.2

cybozugaroonMatch2.1.3

cybozugaroonMatch2.5.0

cybozugaroonMatch2.5.1

cybozugaroonMatch2.5.2

cybozugaroonMatch2.5.3

cybozugaroonMatch2.5.4

cybozugaroonMatch3.0.0

cybozugaroonMatch3.0.1

cybozugaroonMatch3.0.2

cybozugaroonMatch3.0.3

cybozugaroonMatch3.1.0

cybozugaroonMatch3.1.1

cybozugaroonMatch3.1.2

cybozugaroonMatch3.1.3

cybozugaroonMatch3.5.0

cybozugaroonMatch3.5.1

cybozugaroonMatch3.5.2

cybozugaroonMatch3.5.3

cybozugaroonMatch3.5.4

cybozugaroonMatch3.5.5

cybozugaroonMatch3.7.0

cybozugaroonMatch3.7.1

cybozugaroonMatch3.7.2

VendorProductVersionCPE
cybozugaroon2.0cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*
cybozugaroon2.0cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*
cybozugaroon2.0cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*
cybozugaroon2.0cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*
cybozugaroon2.0cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*
cybozugaroon2.0cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*
cybozugaroon2.0.0cpe:2.3:a:cybozu:garoon:2.0.0:*:*:*:*:*:*:*
cybozugaroon2.0.1cpe:2.3:a:cybozu:garoon:2.0.1:*:*:*:*:*:*:*
cybozugaroon2.0.2cpe:2.3:a:cybozu:garoon:2.0.2:*:*:*:*:*:*:*
cybozugaroon2.0.3cpe:2.3:a:cybozu:garoon:2.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	garoon	2.0	cpe:2.3:a:cybozu:garoon:2.0:sp1::::::
cybozu	garoon	2.0	cpe:2.3:a:cybozu:garoon:2.0:sp2::::::
cybozu	garoon	2.0	cpe:2.3:a:cybozu:garoon:2.0:sp3::::::
cybozu	garoon	2.0	cpe:2.3:a:cybozu:garoon:2.0:sp4::::::
cybozu	garoon	2.0	cpe:2.3:a:cybozu:garoon:2.0:sp5::::::
cybozu	garoon	2.0	cpe:2.3:a:cybozu:garoon:2.0:sp6::::::
cybozu	garoon	2.0.0	cpe:2.3:a:cybozu:garoon:2.0.0:::::::*
cybozu	garoon	2.0.1	cpe:2.3:a:cybozu:garoon:2.0.1:::::::*
cybozu	garoon	2.0.2	cpe:2.3:a:cybozu:garoon:2.0.2:::::::*
cybozu	garoon	2.0.3	cpe:2.3:a:cybozu:garoon:2.0.3:::::::*

Rows per page:

1-10 of 421

References

cs.cybozu.co.jp/information/20140127up02.php

jvn.jp/en/jp/JVN91153528/374951/index.html

jvn.jp/en/jp/JVN91153528/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000010

support.cybozu.com/ja-jp/article/7886

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.003

Percentile

69.6%

JSON

Related for CVE-2013-6930