3 matches found
CVE-2012-2398
Cross-site scripting XSS vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4...
PT-2012-4011
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 3.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the files parameter in the "files/ajax/download.php" endpoint. Recommendations For versions prior ...
CVE-2012-2398: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4...