Lucene search

K
cve[email protected]CVE-2013-0303
HistoryMar 24, 2014 - 4:31 p.m.

CVE-2013-0303

2014-03-2416:31:06
web.nvd.nist.gov
27
cve-2013-0303
owncloud
remote code execution
authenticated users
php
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.9%

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344.

Affected configurations

NVD
Node
owncloudowncloudRange4.0.11
OR
owncloudowncloudMatch4.0.0
OR
owncloudowncloudMatch4.0.1
OR
owncloudowncloudMatch4.0.2
OR
owncloudowncloudMatch4.0.3
OR
owncloudowncloudMatch4.0.4
OR
owncloudowncloudMatch4.0.5
OR
owncloudowncloudMatch4.0.6
OR
owncloudowncloudMatch4.0.7
OR
owncloudowncloudMatch4.0.8
OR
owncloudowncloudMatch4.0.9
OR
owncloudowncloudMatch4.0.10
OR
owncloudowncloudMatch4.5.0
OR
owncloudowncloudMatch4.5.1
OR
owncloudowncloudMatch4.5.2
OR
owncloudowncloudMatch4.5.3
OR
owncloudowncloudMatch4.5.4
OR
owncloudowncloudMatch4.5.5

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.9%