Lucene search
Alexander Bürger – Vulnerability discovery and disclosure.OWNCLOUD:75E77B459440B6505D45C99837E49576HistoryApr 02, 2013 - 5:48 p.m.
contacts: SQL Injection - ownCloud
2013-04-0217:48:19
Alexander Bürger – Vulnerability discovery and disclosure.
owncloud.org
25
0.002 Low
EPSS
Percentile
56.2%
ownCloud before 5.0.1 does not neutralize special elements that are passed to the SQL query in addressbookprovider.php which therefore allows an authenticated attacker to execute arbitrary SQL commands.
Affected Software
- ownCloud Server < 5.0.1 (CVE-2013-1893)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 5.0.1.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
- Alexander Bürger - Vulnerability discovery and disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 5.0.1 |
Related
cve
cve
CVE-2013-1893
2014-03-09 13:16:56
owncloud
owncloud
Server: contacts: SQL Injection
2013-04-02 11:42:22
cvelist
cvelist
CVE-2013-1893
2014-03-07 20:00:00
ubuntucve
ubuntucve
CVE-2013-1893
2014-03-09 00:00:00
nvd
nvd
CVE-2013-1893
2014-03-09 13:16:56
prion
prion
Sql injection
2014-03-09 13:16:00
openvas
openvas
ownCloud Multiple XSS and SQL Injection Vulnerabilities
2014-03-14 00:00:00