CVE-2013-1893

CVE-2013-1893 : In ownCloud Server before 5.0.1, the addressbookprovider.php handling within the Contacts app is vulnerable to SQL injection. The root cause is failure to neutralize special elements passed to the SQL query, allowing remote authenticated users to execute arbitrary SQL commands via...

CVE-2013-1893: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to the contacts application...