Lucene search

K
nvd[email protected]NVD:CVE-2013-0303
HistoryMar 24, 2014 - 4:31 p.m.

CVE-2013-0303

2014-03-2416:31:06
web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.9%

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344.

Affected configurations

NVD
Node
owncloudowncloudRange4.0.11
OR
owncloudowncloudMatch4.0.0
OR
owncloudowncloudMatch4.0.1
OR
owncloudowncloudMatch4.0.2
OR
owncloudowncloudMatch4.0.3
OR
owncloudowncloudMatch4.0.4
OR
owncloudowncloudMatch4.0.5
OR
owncloudowncloudMatch4.0.6
OR
owncloudowncloudMatch4.0.7
OR
owncloudowncloudMatch4.0.8
OR
owncloudowncloudMatch4.0.9
OR
owncloudowncloudMatch4.0.10
OR
owncloudowncloudMatch4.5.0
OR
owncloudowncloudMatch4.5.1
OR
owncloudowncloudMatch4.5.2
OR
owncloudowncloudMatch4.5.3
OR
owncloudowncloudMatch4.5.4
OR
owncloudowncloudMatch4.5.5

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.9%