CVE-2013-6929: SQL Injection
Published Dec 28, 2013
·Updated
SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.
Affected Software
3 affected components
Cybozu Garoon<=3.7
Cybozu Garoon=3.7
Cybozu Garoon=3.7-sp1
Event History
Dec 28, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·04:53 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6929?
The severity of CVE-2013-6929 is classified as high due to the potential for remote authenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2013-6929?
To fix CVE-2013-6929, upgrade to the latest version of Cybozu Garoon that addresses this SQL injection vulnerability.
3
Who is affected by CVE-2013-6929?
CVE-2013-6929 affects remote authenticated users of Cybozu Garoon version 3.7 SP2 and earlier.
4
What kind of vulnerability is CVE-2013-6929?
CVE-2013-6929 is an SQL injection vulnerability that allows the execution of arbitrary SQL commands.
5
What are the potential impacts of CVE-2013-6929?
The potential impacts of CVE-2013-6929 include unauthorized access to data and manipulation of the database by attackers.