PT-2025-33349

Name of the Vulnerable Software and Affected Versions Python-Future version 1.0.0 Description An issue in the Python-Future module allows for arbitrary code execution through the unintended import of a file named 'test.py'. When the module is loaded, it automatically imports 'test.py' if the file...

CVE-2012-3353

The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader...

CVE-2012-3353: Exposure of Sensitive Information to an Unauthorized Actor

The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing potential information leaks. Users should upgrade to version 2.1.6 of the JCR ContentLoader...

PT-2018-4050

Name of the Vulnerable Software and Affected Versions Apache Sling JCR ContentLoader versions 2.1.4 Description The issue allows the import of arbitrary files in the content repository, including local files, potentially causing information leaks. Recommendations For Apache Sling JCR ContentLoade...

CVE-2013-1851

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the usermigrate application is enabled, allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors...

PT-2014-2505

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.13 ownCloud versions 4.5.x prior to 4.5.8 Description The issue allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors when the user migrate application is...

CVE-2013-1851: Undefined Security Weakness

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the usermigrate application is enabled, allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors...