Lucene search
OwnCloudOC-SA-2013-002HistoryJan 22, 2013 - 10:42 a.m.
Server: Code execution in external storage
2013-01-2210:42:22
owncloud.org
16
0.002 Low
EPSS
Percentile
56.4%
Due to not sufficiently sanitizing the user input in “settings/personal.php” in ownCloud 4.5.x before 4.5.6 an authenticated remote attackers may be able to execute arbitrary code by entering special crafted PHP code in the mount point settings.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.5.6 |
Related
cve
cve
CVE-2013-0204
2014-06-04 14:55:03
ubuntucve
ubuntucve
CVE-2013-0204
2014-06-04 00:00:00
openvas
openvas
ownCloud PHP Code Execution Vulnerability (Jul 2014)
2014-07-03 00:00:00
ownCloud <= 4.0.10, 4.5.x <= 4.5.5 Multiple Vulnerabilities - Active Check
2013-01-24 00:00:00
prion
prion
Code injection
2014-06-04 14:55:00
cvelist
cvelist
CVE-2013-0204
2014-06-04 14:00:00
nvd
nvd
CVE-2013-0204
2014-06-04 14:55:03
owncloud
owncloud
Code execution in external storage - ownCloud
2013-01-22 17:28:16