CVE-2012-5666

Cross-site scripting XSS vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to apps/bookmark/index.php...

CVE-2012-5666

CVE-2012-5666 is an XSS vulnerability affecting ownCloud 4.0.x (before 4.0.10) and 4.5.x (before 4.5.5). The issue resides in bookmarks/js/bookmarks.js, enabling remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to apps/bookmark/index.php. Proof of impact: cross-...