medium6.5
CVE-2013-6929
SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.
Impact
SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | through 3.7 Version 3.7 |