Lucene search
Yuji Kosuga – Vulnerability discovery and disclosure.OWNCLOUD:49B59B4CB8EAA24C376B6BF5FB135BDCHistoryJan 22, 2013 - 5:28 p.m.
Code execution in external storage - ownCloud
2013-01-2217:28:16
Yuji Kosuga – Vulnerability discovery and disclosure.
owncloud.org
27
0.002 Low
EPSS
Percentile
56.4%
Due to not sufficiently sanitizing the user input in “settings/personal.php” in ownCloud 4.5.x before 4.5.6 an authenticated remote attackers may be able to execute arbitrary code by entering special crafted PHP code in the mount point settings.
Affected Software
- ownCloud Server < 4.5.6 (CVE-2013-0204)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 4.5.6.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
- Yuji Kosuga - Vulnerability discovery and disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.5.6 |
Related
cve
cve
CVE-2013-0204
2014-06-04 14:55:03
ubuntucve
ubuntucve
CVE-2013-0204
2014-06-04 00:00:00
openvas
openvas
ownCloud PHP Code Execution Vulnerability (Jul 2014)
2014-07-03 00:00:00
ownCloud <= 4.0.10, 4.5.x <= 4.5.5 Multiple Vulnerabilities - Active Check
2013-01-24 00:00:00
prion
prion
Code injection
2014-06-04 14:55:00
cvelist
cvelist
CVE-2013-0204
2014-06-04 14:00:00
nvd
nvd
CVE-2013-0204
2014-06-04 14:55:03
owncloud
owncloud
Server: Code execution in external storage
2013-01-22 10:42:22