Lucene search
IshahriyarH1:87505HistorySep 04, 2015 - 5:21 p.m.
ownCloud: Full Path Disclosure
2015-09-0417:21:30
ishahriyar
hackerone.com
$25
24
0.001 Low
EPSS
Percentile
35.1%
When I was trying to upload a html file as profile picture as a non admin user. then it popped up with a message containing full path . Like that
“Could not obtain lock type 1 on “/opt/lampp/htdocs/owncloud/data/12/files/opt/lampp/htdocs/owncloud/data/12/cache/avatar_upload”.”
Thanks.
Related
cve
cve
CVE-2016-1501
2016-01-08 21:59:09
hackerone
hackerone
ownCloud: Full Path Disclosure
2015-08-27 14:18:56
nvd
nvd
CVE-2016-1501
2016-01-08 21:59:09
owncloud
owncloud
Full installation path disclosure through error message - ownCloud
2016-01-06 18:58:15
Server: Full installation path disclosure through error message
2016-01-06 01:40:33
ubuntucve
ubuntucve
CVE-2016-1501
2016-01-08 00:00:00
openvas
openvas
ownCloud 8.0.x < 8.0.9, 8.1.x < 8.1.4 Path Disclosure Vulnerability - Linux
2016-03-02 00:00:00
prion
prion
Design/Logic Flaw
2016-01-08 21:59:00
cvelist
cvelist
CVE-2016-1501
2016-01-08 21:00:00