Lucene search
OwnCloudOC-SA-2013-012HistoryApr 02, 2013 - 11:42 a.m.
Server: contacts: SQL Injection
2013-04-0211:42:22
owncloud.org
14
0.002 Low
EPSS
Percentile
56.2%
ownCloud before 5.0.1 does not neutralize special elements that are passed to the SQL query in addressbookprovider.php which therefore allows an authenticated attacker to execute arbitrary SQL commands.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 5.0.1 |
Related
cve
cve
CVE-2013-1893
2014-03-09 13:16:56
owncloud
owncloud
contacts: SQL Injection - ownCloud
2013-04-02 17:48:19
cvelist
cvelist
CVE-2013-1893
2014-03-07 20:00:00
ubuntucve
ubuntucve
CVE-2013-1893
2014-03-09 00:00:00
nvd
nvd
CVE-2013-1893
2014-03-09 13:16:56
prion
prion
Sql injection
2014-03-09 13:16:00
openvas
openvas
ownCloud Multiple XSS and SQL Injection Vulnerabilities
2014-03-14 00:00:00