CVE-2019-5934

Publication date

2019-05-17 15:25:55

Family

jpcert

State

PUBLISHED

Description

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application logging.