CVE-2012-5336

lib/base.php in ownCloud before 4.0.8 does not properly validate the userid session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV...

PT-2014-2305

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.8 Description The issue is related to improper validation of the user id session variable in lib/base.php, allowing remote authenticated users to read arbitrary files via vectors related to WebDAV. Recommendation...

CVE-2012-5336: Improper Input Validation

lib/base.php in ownCloud before 4.0.8 does not properly validate the userid session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV...

CVE-2007-5175: Improper Control of Generation of Code

PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL in the BaseCfgBaseDir parameter...