Some SQL injection vulnerabilities have been found in Cybozu Garoon 2 version 2.1.0 for Windows. When exploited by a logged on user, the vulnerabilities allow for manipulation of SQL statements which can lead to disclosure of information from the database, or to cause the backend MySQL database to consume large amount of CPU resources.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49525/cybozuSQL.txt
Source: https://packetstormsecurity.com/files/49525/cybozuSQL.txt.html