CVE-2013-6930

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-29 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929.

Affected products

Cybozu, Inc. Cybozu Garoon: 2.0-sp1, 2.0-sp2, 2.0-sp3, 2.0-sp4, 2.0-sp5, 2.0-sp6 (+36)

References

http://cs.cybozu.co.jp/information/20140127up02.php
http://jvn.jp/en/jp/JVN91153528/374951/index.html
http://jvn.jp/en/jp/JVN91153528/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000010
https://support.cybozu.com/ja-jp/article/7886
http://cs.cybozu.co.jp/information/20140127up02.php
http://jvn.jp/en/jp/JVN91153528/374951/index.html
http://jvn.jp/en/jp/JVN91153528/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000010
https://support.cybozu.com/ja-jp/article/7886

Get alerted when CVE-2013-6930 or the next vulnerability affects your stack