ownCloud: owncloud.com: Outdated plugins contains public exploits

hey There were many outdated plugins that has may public exploits available , it is strongly suggested to update these . WPML to 3.1.9 sitepress multilingual cms to 3.1.72 google analyticator to 6.9.4.4 Kindly fix these...

Server: Calendar export: Authorization Bypass Through User-Controlled Key

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calid" GET parameter to export.php in /apps/calendar/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Server: Information Exposure Through Directory Listing in the file scanner

Due to an incorrect usage of an ownCloud internal file system function the passed path to the file scanner was resolved relatively. An authenticated adversary may thus be able to get a listing of directories but not the containing files existing on the filesystem. However, it is not possible to...

ownCloud: Lack of HSTS on https://apps.owncloud.com

Hi, There is lack of HSTS on you domain https://apps.owncloud.com https://apps.owncloud.com/content/add.php GET /content/add.php HTTP/1.1 Host: apps.owncloud.com User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64; rv:39.0 Gecko/20100101 Firefox/39.0 Accept:...

Information Exposure Through Directory Listing in the file scanner - ownCloud

Due to an incorrect usage of an ownCloud internal file system function the passed path to the file scanner was resolved relatively. An authenticated adversary may thus be able to get a listing of directories but not the containing files existing on the filesystem. However, it is not possible to...

ownCloud: CSRF in apps.owncloud.com

Hello owncloud security team , I am a researcher of security, wanted to reveal a security vulnerability responsibility CSRF , which is found in the website of your website apps.owncloud.com. this bug allow to hackers takeover of user accounts POC : https://www.youtube.com/watch?v=6YnjPoiutfA For...

ownCloud: apps.owncloud.com: Malicious file upload leads to remote code execution

Hello ownCloud Security Team, i am here to report a critical security vulnerability . Proof of concept : https://apps.owncloud.com/CONTENT/content-pre1/171172-1.php5 code source of uploaded file :...

ownCloud: apps.owncloud.com: Stored XSS in profile page

Hi Owncloud, I've found A XSS vulnerability on apps.owncloud.com When I add a comment to add any comment field,My profile page shows my latest comment When I add a comment starts with " the page show this comment so XSS alert occurs in profile page. Even if a victim is not...

ownCloud: demo.owncloud.org: HTTP compression is enabled potentially leading to BREACH attack

@pareshparmar reported the BREACH vulnerability on demo.owncloud.org. ownCloud has meanwhile disabled compression on the system. It should be noted that starting with ownCloud 8.2 the CSRF token is randomized for each request. As per request by the reporter this issue has only been disclosed...

ownCloud: daily.owncloud.com: Information disclosure

https://daily.owncloud.com/enterprise-stable8/enterprise/apps/ I have found a readme.md files also i think this is leaking more information...

ownCloud: *.owncloud.com / *.owncloud.org: Using not strong enough SSL ciphers

We have received multiple reports that some of our domains on .owncloud.com and .owncloud.org are not using a recommended configuration for HTTPS purposes. To avoid having multiple issues to track SSL / TLS related problems on .owncloud.com and .owncloud.org we have merged multiple issues togethe...

ownCloud: test1.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability

DOMAIN: test1.owncloud.com PORT: 443 THREAT: The Web server was detected that supports the HTTP TRACE method. This method allows debugging and connection trace analysis for connections from the client to the Web server. Per the HTTP specification, when this method is used, the Web server echoes...

ownCloud: s2.owncloud.com: SSL Session cookie without secure flag set

URL: https://s2.owncloud.com/ Issue detail The following cookie was issued by the application and does not have the secure flag set: sessionid=0fdc40cc016d1e70b1567b0071e5dcd2; expires=Sat Aug 22 03:45:12 2015; path=/; domain=s2.owncloud.com; max-age=86387; httponly The cookie appears to contain ...

ownCloud: s2.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability

DOMAIN: s2.owncloud.com PORT: 83 THREAT: The Web server was detected that supports the HTTP TRACE method. This method allows debugging and connection trace analysis for connections from the client to the Web server. Per the HTTP specification, when this method is used, the Web server echoes back...

ownCloud: apps.owncloud.com: SSL Server Allows Anonymous Authentication Vulnerability (SMTP)

Domain: https://apps.owncloud.com The Secure Socket Layer SSL protocol allows for secure communication between a client and a server. The client usually authenticates the server using an algorithm like RSA or DSS. Some SSL ciphers allow SSL communication without authentication. Most common Web...

ownCloud: apps.owncloud.com: Path Disclosure

Threat: A potentially sensitive file, directory, or directory listing was discovered on the Web server. Impact: The contents of this file or directory may disclose sensitive information. Solution: Verify that access to this file or directory is permitted. If necessary, remove it or apply access...

ownCloud: apps.owncloud.com: Session Cookie in URL can be captured by hackers

Session Cookie in URL URL: https://apps.owncloud.com/stories/feed+rss Issue detail The URL in the request appears to contain a PHP Session token within the query string: https://apps.owncloud.com/stories/feed+rss?id=42590&PHPSESSID=ee0624300266683a4625aabea344212a Issue background Sensitive...

ownCloud: owncloud.com: PermError SPF Permanent Error: Too many DNS lookups

I just checked for SPF records for the owncloud.com domain, and there are none, effectively allowing for spamspoof to originate from that domain. you can validate by testing yourself here: http://www.kitterman.com/spf/validate.html SPF record lookup and validation for: owncloud.com SPF records ar...

ownCloud: apps.owncloud.com: Multiple reflected XSS by insecure URL generation (IE only)

Due to a bug in the URL generation component mainly used by forms on the ownCloud appstore available at apps.owncloud.com is vulnerable to multiple reflected XSS. This problem seems only to be exploitable in Internet Explorer since other browsers are URL encoding GET parameters. This was...

ownCloud: owncloud.com: Cross Site Tracing

REQUEST: TRACE / HTTP/1.0 Host: owncloud.com Cookie: 74b33b43fa RESPONSE: HTTP/1.1 200 OK Date: Wed, 19 Aug 2015 06:59:31 GMT Server: Apache/2.2.17 Linux/SUSE Connection: close Content-Type: message/http TRACE / HTTP/1.0 Host: owncloud.com Cookie: 74b33b43fa; wordpresstestcookie=WP+Cookie+check;...