CVE-2013-0203

🗓️ 22 Nov 2019 18:53:44Reported by redhatType

cve🔗 web.nvd.nist.gov👁 106 Views🌐 WEB

Multiple XSS vulnerabilities in ownCloud 4.5.5 and earlier versions allow remote attackers to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2013-0203	22 Nov 201919:15	–	attackerkb
Circl	CVE-2013-0203	26 Feb 202413:11	–	circl
Cvelist	CVE-2013-0203	22 Nov 201918:53	–	cvelist
EUVD	EUVD-2013-0238	7 Oct 202500:30	–	euvd
NVD	CVE-2013-0203	22 Nov 201919:15	–	nvd
OwnCloud	Server: Multiple XSS vulnerabilities	22 Jan 201310:42	–	owncloud
OwnCloud	Multiple XSS vulnerabilities - ownCloud	22 Jan 201317:26	–	owncloud
OpenVAS	ownCloud <= 4.0.10, 4.5.x <= 4.5.5 Multiple Vulnerabilities - Active Check	24 Jan 201300:00	–	openvas
OpenVAS	ownCloud Multiple XSS Vulnerabilities-01 (Apr 2014)	4 Apr 201400:00	–	openvas
Prion	Cross site scripting	22 Nov 201919:15	–	prion

NVD

Vulners

Node

owncloud owncloudRange≤4.0.10

owncloud owncloud_serverRange4.5.0–4.5.5

[
  {
    "product": "ownCloud Server",
    "vendor": "ownCloud",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.5"
      },
      {
        "status": "affected",
        "version": "4.0.10"
      },
      {
        "status": "affected",
        "version": "and earlier"
      }
    ]
  }
]

Source	Link
owncloud	www.owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/81478

Parameter	Position	Path	Description	CWE
unspecified parameters	request body	apps/calendar/ajax/event/new.php	Multiple XSS vulnerabilities via unspecified parameters to the event creation endpoint.	CWE-79
url	query param	apps/bookmarks/ajax/addBookmark.php	XSS vulnerability via url parameter to add bookmark endpoint.	CWE-79

31 Mar 2025 11:54Current

5.7Medium risk

Vulners AI Score5.7

CVSS 23.5

CVSS 3.15.4

EPSS0.00236

CWE-79