CVE-2014-2057

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0303

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered ...

CVE-2013-7344

CVE-2013-7344 affects the ownCloud project, specifically the file core/settings.php in versions older than 4.0.12 and older than 4.5.6 where an issue allowed remote authenticated users to execute arbitrary PHP code via unknown vectors. This vulnerability is the split from CVE-2013-0303 (core/ajax...

CVE-2013-0303

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered ...

CVE-2013-0303

CVE-2013-0303 describes an unspecified vulnerability in ownCloud's core/ajax/translations.php affecting versions prior to 4.0.12 and 4.5.x prior to 4.5.6, allowing remote authenticated users to execute arbitrary PHP code via unknown vectors. The issue is split from CVE-2013-7344, which covers cor...

CVE-2014-2057

CVE-2014-2057 affects the open-source file sync and share platform ownCloud . The vulnerability is described as multiple XSS vulnerabilities in versions before 6.0.2 , allowing remote attackers to inject arbitrary web script or HTML through unspecified vectors. The root cause is cross-site script...

CVE-2013-7344

Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions...

CVE-2013-0303: Undefined Security Weakness

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered ...

CVE-2014-2057: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-4794

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 5.0.15 ownCloud versions 6.x prior to 6.0.2 Description The issue allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration when the file external app is...

PT-2014-3380

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.12 ownCloud versions 4.5.x prior to 4.5.6 Description The issue allows remote authenticated users to execute arbitrary PHP code. Recommendations For ownCloud versions prior to 4.0.12, update to version 4.0.12 or...

PT-2014-4457

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 6.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For versions prior to 6.0.2,...

PT-2014-2448

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.12 ownCloud versions 4.5.x prior to 4.5.6 Description The issue allows remote authenticated users to execute arbitrary PHP code. Recommendations For ownCloud versions prior to 4.0.12, update to version 4.0.12 or...

CVE-2013-7344: Undefined Security Weakness

Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions...

CVE-2014-2585: Improper Input Validation

ownCloud before 5.0.15 and 6.x before 6.0.2, when the fileexternal app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration...

CVE-2013-0201

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...

CVE-2013-0201

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...

CVE-2013-0201

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...

CVE-2013-0201

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...