description: SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'.
problem types: SQL Injection
affected:
{
product: Cybozu Garoon
vendor: Cybozu, Inc.
versions:
status: affected, version: 4.0.0 to 4.10.0
}