Lucene search
OwnCloudOC-SA-2012-001HistoryAug 24, 2012 - 11:42 a.m.
Server: Multiple XSS vulnerabilities
2012-08-2411:42:22
owncloud.org
17
0.0004 Low
EPSS
Percentile
5.1%
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.0 allow remote attackers to inject arbitrary web script or HTML via
- the filename to to versions.js in apps/files_versions/js/
- the filename to filelist.js in apps/files/js/
- the event title to fullcalendar.js in 3rdparty/fullcalendar/js/
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.0.9 | |
| owncloud server | lt | 4.5.1 |
Related
nvd
nvd
CVE-2012-5605
2013-01-04 22:55:02
owncloud
owncloud
Multiple XSS vulnerabilities - ownCloud
2012-08-24 09:24:57
cve
cve
CVE-2012-5605
2013-01-04 22:55:02
prion
prion
Default configuration
2013-01-04 22:55:00
cvelist
cvelist
CVE-2012-5605
2013-01-04 22:00:00
veracode
veracode
Information Disclosure
2019-05-02 04:41:52
Privilege Escalation
2019-05-02 04:41:52
Information Disclosure
2019-05-02 04:41:51
nessus
nessus
redhat
redhat
(RHSA-2012:1543) Important: CloudForms System Engine 1.1 update
2012-12-04 00:00:00