Lucene search

K
owncloudOwnCloudOC-SA-2012-012
HistoryJul 10, 2012 - 11:42 a.m.

Server: Code execution in /lib/migrate.php

2012-07-1011:42:22
owncloud.org
27

0.005 Low

EPSS

Percentile

77.6%

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

CPENameOperatorVersion
owncloud serverlt4.0.7

0.005 Low

EPSS

Percentile

77.6%