Lucene search
MitreCVELIST:CVE-2014-2044HistoryOct 06, 2014 - 11:00 p.m.
CVE-2014-2044
2014-10-0623:00:00
mitre
raw.githubusercontent.com
2
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter, as demonstrated using .htaccess::$DATA to upload a PHP program.
Related
zdt
zdt
ownCloud 4.0.x, 4.5.x (upload.php, filename param) - Remote Code Execution
2014-03-10 00:00:00
prion
prion
Design/Logic Flaw
2014-10-06 23:55:00
cve
cve
CVE-2014-2044
2014-10-06 23:55:08
seebug
seebug
ownCloud 'filename'εζ°θΏη¨δ»£η ζ§θ‘ζΌζ΄
2014-03-11 00:00:00
ownCloud 4.0.x, 4.5.x (upload.php, filename param) - Remote Code Execution
2014-07-01 00:00:00
packetstorm
packetstorm
ownCloud 4.0.x / 4.5.x Remote Code Execution
2014-03-06 00:00:00
securityvulns
securityvulns
owncloud security vulnerabilities
2014-05-05 00:00:00
CVE-2014-2044 - Remote Code Execution in ownCloud
2014-05-05 00:00:00
exploitpack
exploitpack
ownCloud 4.0.x4.5.x - upload.php?Filename Remote Code Execution
2014-03-10 00:00:00
openvas
openvas
ownCloud < 5.0 RCE Vulnerability - Windows
2021-09-08 00:00:00
ubuntucve
ubuntucve
CVE-2014-2044
2014-10-06 00:00:00
exploitdb
exploitdb
ownCloud 4.0.x/4.5.x - 'upload.php?Filename' Remote Code Execution
2014-03-10 00:00:00