Vulnerabilities > Cybozu

DATE CVE VULNERABILITY TITLE RISK
2006-08-31 CVE-2006-4491 Directory Traversal vulnerability in Cybozu Ag
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
network
low complexity
cybozu
4.0
2006-08-31 CVE-2006-4490 Directory Traversal vulnerability in Cybozu Office
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a ..
network
low complexity
cybozu
4.0
2006-08-29 CVE-2006-4444 SQL Injection vulnerability in Cybozu Garoon 2.1.0Forwindows
Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the (1) tid parameter in the (a) todo/view (aka TODO List View), (b) todo/modify (aka TODO List Modify), or (c) todo/delete functionality; the (2) pid parameter in the (d) workflow/view or (e) workflow/print functionality; the (3) uid parameter in the (f) schedule/user_view, (g) phonemessage/add, (h) phonemessage/history, or (i) schedule/view functionality; the (4) cid parameter in (j) todo/index; the (5) iid parameter in the (k) memo/view or (l) memo/print functionality; or the (6) event parameter in the (m) schedule/view functionality.
network
low complexity
cybozu
6.5
2002-12-31 CVE-2002-1960 Cross-Site Scripting vulnerability in Cybozu Share360 1.1
Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link.
network
cybozu
4.3