Lucene search

RedhatCVELIST:CVE-2012-5609

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5609

2022-10-0316:15:30

redhat

www.cve.org

owncloud

vulnerability

remote code execution

php code

zip file

security

7.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.

References

owncloud.org/changelog/

owncloud.org/security/advisories/oc-sa-2012-004/

secunia.com/advisories/51357

www.openwall.com/lists/oss-security/2012/11/30/3

github.com/owncloud/core/commit/4619c66

github.com/owncloud/core/commit/e8a0cea