CVE-2013-6930: SQL Injection

Published Jan 29, 2014

Updated

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929.

Affected Software

42 affected components

Cybozu Garoon=2.0-sp1

Cybozu Garoon=2.0-sp2

Cybozu Garoon=2.0-sp3

Cybozu Garoon=2.0-sp4

Cybozu Garoon=2.0-sp5

Cybozu Garoon=2.0-sp6

Cybozu Garoon=2.0.0

Cybozu Garoon=2.0.1

Cybozu Garoon=2.0.2

Cybozu Garoon=2.0.3

Cybozu Garoon=2.0.4

Cybozu Garoon=2.0.5

Cybozu Garoon=2.0.6

Cybozu Garoon=2.1-sp1

Cybozu Garoon=2.1-sp2

Cybozu Garoon=2.1-sp3

Cybozu Garoon=2.1.0

Cybozu Garoon=2.1.1

Cybozu Garoon=2.1.2

Cybozu Garoon=2.1.3

Cybozu Garoon=2.5.0

Cybozu Garoon=2.5.1

Cybozu Garoon=2.5.2

Cybozu Garoon=2.5.3

Cybozu Garoon=2.5.4

Cybozu Garoon=3.0.0

Cybozu Garoon=3.0.1

Cybozu Garoon=3.0.2

Cybozu Garoon=3.0.3

Cybozu Garoon=3.1.0

Cybozu Garoon=3.1.1

Cybozu Garoon=3.1.2

Cybozu Garoon=3.1.3

Cybozu Garoon=3.5.0

Cybozu Garoon=3.5.1

Cybozu Garoon=3.5.2

Cybozu Garoon=3.5.3

Cybozu Garoon=3.5.4

Cybozu Garoon=3.5.5

Cybozu Garoon=3.7.0

Cybozu Garoon=3.7.1

Cybozu Garoon=3.7.2

Event History

Jan 29, 2014

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via NVD·05:37 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6930?

CVE-2013-6930 has a medium severity rating, which allows authenticated users to execute arbitrary SQL commands.

How do I fix CVE-2013-6930?

To fix CVE-2013-6930, upgrade Cybozu Garoon to version 3.7.3 or later, which addresses the SQL injection vulnerability.

Who is affected by CVE-2013-6930?

CVE-2013-6930 affects specific versions of Cybozu Garoon, from 2.0.0 through 3.7.2.

What kind of vulnerability is CVE-2013-6930?

CVE-2013-6930 is an SQL injection vulnerability related to page navigation within the application.

Can CVE-2013-6930 be exploited remotely?

Yes, CVE-2013-6930 can be exploited remotely by authenticated users.