PT-2014-2445

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.6 Description The issue allows remote attackers to hijack the authentication of users for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities. Specifically...

PT-2012-6055

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via arbitrary POST parameters. This affects the apps/user webdavauth/settings.php file...