CVE-2013-6930
Summary
| CVE | CVE-2013-6930 |
|---|---|
| State | PUBLISHED |
| Assigner | jpcert |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-29 05:37:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929. |
Risk And Classification
Primary CVSS: v2.0 6.5 from [email protected]
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 0.003900000 probability, percentile 0.599970000 (date 2026-05-04)
Problem Types: CWE-89 | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cybozu | Garoon | 2.0 | sp1 | All | All |
| Application | Cybozu | Garoon | 2.0 | sp2 | All | All |
| Application | Cybozu | Garoon | 2.0 | sp3 | All | All |
| Application | Cybozu | Garoon | 2.0 | sp4 | All | All |
| Application | Cybozu | Garoon | 2.0 | sp5 | All | All |
| Application | Cybozu | Garoon | 2.0 | sp6 | All | All |
| Application | Cybozu | Garoon | 2.0.0 | All | All | All |
| Application | Cybozu | Garoon | 2.0.1 | All | All | All |
| Application | Cybozu | Garoon | 2.0.2 | All | All | All |
| Application | Cybozu | Garoon | 2.0.3 | All | All | All |
| Application | Cybozu | Garoon | 2.0.4 | All | All | All |
| Application | Cybozu | Garoon | 2.0.5 | All | All | All |
| Application | Cybozu | Garoon | 2.0.6 | All | All | All |
| Application | Cybozu | Garoon | 2.1 | sp1 | All | All |
| Application | Cybozu | Garoon | 2.1 | sp2 | All | All |
| Application | Cybozu | Garoon | 2.1 | sp3 | All | All |
| Application | Cybozu | Garoon | 2.1.0 | All | All | All |
| Application | Cybozu | Garoon | 2.1.1 | All | All | All |
| Application | Cybozu | Garoon | 2.1.2 | All | All | All |
| Application | Cybozu | Garoon | 2.1.3 | All | All | All |
| Application | Cybozu | Garoon | 2.5.0 | All | All | All |
| Application | Cybozu | Garoon | 2.5.1 | All | All | All |
| Application | Cybozu | Garoon | 2.5.2 | All | All | All |
| Application | Cybozu | Garoon | 2.5.3 | All | All | All |
| Application | Cybozu | Garoon | 2.5.4 | All | All | All |
| Application | Cybozu | Garoon | 3.0.0 | All | All | All |
| Application | Cybozu | Garoon | 3.0.1 | All | All | All |
| Application | Cybozu | Garoon | 3.0.2 | All | All | All |
| Application | Cybozu | Garoon | 3.0.3 | All | All | All |
| Application | Cybozu | Garoon | 3.1.0 | All | All | All |
| Application | Cybozu | Garoon | 3.1.1 | All | All | All |
| Application | Cybozu | Garoon | 3.1.2 | All | All | All |
| Application | Cybozu | Garoon | 3.1.3 | All | All | All |
| Application | Cybozu | Garoon | 3.5.0 | All | All | All |
| Application | Cybozu | Garoon | 3.5.1 | All | All | All |
| Application | Cybozu | Garoon | 3.5.2 | All | All | All |
| Application | Cybozu | Garoon | 3.5.3 | All | All | All |
| Application | Cybozu | Garoon | 3.5.4 | All | All | All |
| Application | Cybozu | Garoon | 3.5.5 | All | All | All |
| Application | Cybozu | Garoon | 3.7.0 | All | All | All |
| Application | Cybozu | Garoon | 3.7.1 | All | All | All |
| Application | Cybozu | Garoon | 3.7.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ページ送りに関する SQL インジェクションの脆弱性【CY14-01-001】 | サイボウズからのお知らせ | af854a3a-2127-422b-91ae-364da2661108 | cs.cybozu.co.jp | Vendor Advisory |
| Japan Vulnerability Notes/Information from Cybozu, Inc. | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | |
| JVN#91153528: Multiple SQL injection vulnerabilities in Cybozu Garoon | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | |
| サイボウズ 不具合情報公開サイト - ページ送りに関するSQLインジェクションの脆弱性 | af854a3a-2127-422b-91ae-364da2661108 | support.cybozu.com | Vendor Advisory |
| jvndb.jvn.jp/jvndb/JVNDB-2014-000010 | af854a3a-2127-422b-91ae-364da2661108 | jvndb.jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.