The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-866.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN21025396/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000151 | Vendor Advisory |
http://jvn.jp/en/jp/JVN21025396/374951/index.html | Vendor Advisory |
https://support.cybozu.com/ja-jp/article/8810 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-10-12 03:59
Updated : 2015-10-13 10:05
NVD link : CVE-2015-5647
Mitre link : CVE-2015-5647
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
cybozu
- garoon