CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2012/04/20 10:55 a.m.•20 views

CVE-2012-2398

Cross-site scripting XSS vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4...

4.3CVSS5.5AI score0.01187EPSS

Exploits0References4

UbuntuCve•added 2012/04/20 10:55 a.m.•22 views

CVE-2012-2398

4.3CVSS6AI score0.01187EPSS

Exploits0References2

CVE•added 2012/04/20 10:0 a.m.•63 views

CVE-2012-2398

CVE-2012-2398 describes a cross-site scripting (XSS) vulnerability in the ownCloud project. The flaw resides in the files/ajax/download.php endpoint and allows remote attackers to inject arbitrary web script or HTML via the files parameter, affecting versions prior to 3.0.3. The underlying issue ...

4.3CVSS5.6AI score0.01187EPSS

Exploits0References4Affected Software2