8.5
CVSSv2

CVE-2015-5647

Published: 12/10/2015 Updated: 13/10/2015
CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8
VMScore: 756
Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Summary

The RSS Reader component in Cybozu Garoon 3.x up to and including 3.7.5 and 4.x up to and including 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-866.

Vulnerable Product Search on Vulmon Subscribe to Product

cybozu garoon 3.1.2

cybozu garoon 3.1.3

cybozu garoon 3.5.0

cybozu garoon 3.5.1

cybozu garoon 4.0.2

cybozu garoon 4.0.3

cybozu garoon 3.0.1

cybozu garoon 3.0.3

cybozu garoon 3.1.1

cybozu garoon 3.5.2

cybozu garoon 3.5.4

cybozu garoon 3.7.5

cybozu garoon 4.0.1

cybozu garoon 3.0.0

cybozu garoon 3.7.0

cybozu garoon 3.7.1

cybozu garoon 3.7.2

cybozu garoon 3.7.3

cybozu garoon 3.0.2

cybozu garoon 3.1.0

cybozu garoon 3.5.3

cybozu garoon 3.5.5

cybozu garoon 3.7.4

cybozu garoon 4.0.0