CVE-2013-6929 Information

Description

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.

Reference

http://jvn.jp/en/jp/JVN60997973/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2013-000124 https://support.cybozu.com/ja-jp/article/7889