Lucene search

K
cve[email protected]CVE-2012-5609
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5609

2022-10-0316:15:30
web.nvd.nist.gov
20
vulnerability
owncloud
php code
zip file
security

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.

Affected configurations

NVD
Node
owncloudowncloudRange4.5.1
OR
owncloudowncloudMatch3.0.0
OR
owncloudowncloudMatch3.0.1
OR
owncloudowncloudMatch3.0.2
OR
owncloudowncloudMatch3.0.3
OR
owncloudowncloudMatch4.0.0
OR
owncloudowncloudMatch4.0.1
OR
owncloudowncloudMatch4.0.2
OR
owncloudowncloudMatch4.0.3
OR
owncloudowncloudMatch4.0.4
OR
owncloudowncloudMatch4.0.5
OR
owncloudowncloudMatch4.0.6
OR
owncloudowncloudMatch4.0.7
OR
owncloudowncloudMatch4.0.8
OR
owncloudowncloudMatch4.0.9
OR
owncloudowncloudMatch4.5.0

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

Related for CVE-2012-5609