CVE-2013-0300

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the default view via the v parameter to apps/calendar/ajax/changeview.php, mount arbitrary 2 Google Drive or 3 Dropbox...

PT-2014-2445

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.6 Description The issue allows remote attackers to hijack the authentication of users for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities. Specifically...