Code injection

2012-09-0523:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.5%

JSON

(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors.

CPENameOperatorVersion
owncloudeq4.0.3
owncloudeq4.0.0
owncloudeq3.0.3
owncloudle4.0.6
owncloudeq4.0.1
owncloudeq4.0.5
owncloudeq4.0.2
owncloudeq3.0.0
owncloudeq3.0.2
owncloudeq4.0.4

Name	Operator	Version
owncloud	eq	4.0.3
owncloud	eq	4.0.0
owncloud	eq	3.0.3
owncloud	le	4.0.6
owncloud	eq	4.0.1
owncloud	eq	4.0.5
owncloud	eq	4.0.2
owncloud	eq	3.0.0
owncloud	eq	3.0.2
owncloud	eq	4.0.4