high8.5
CVE-2015-5647
The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecifi…
Impact
The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-866.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.1.0, 3.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN21025396/374951/index.html
- http://jvn.jp/en/jp/JVN21025396/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000151
- https://support.cybozu.com/ja-jp/article/8810
- http://jvn.jp/en/jp/JVN21025396/374951/index.html
- http://jvn.jp/en/jp/JVN21025396/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000151
- https://support.cybozu.com/ja-jp/article/8810