PT-2013-1831

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.0.x through 4.0.9 ownCloud versions 4.5.x through 4.5.4 Description The issue allows remote attackers to edit app configurations by accessing a certain file, potentially affecting user webdavauth and user ldap configuration...

Code injection

appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393...

CVE-2012-4752

appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393...

CVE-2012-4752: Undefined Security Weakness

appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393...

PT-2012-5575

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.6 Description The issue allows remote authenticated users to edit app configurations due to improper access restrictions in the appconfig.php file. This can potentially be exploited by unauthenticated remote...

PT-2012-5365

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.7 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations. Recommendations For versions prior to 4.0.7,...