Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the 1 quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin...

CVE-2013-1822

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the 1 quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin...

PT-2014-2502

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.7 Description The issue allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the quota parameter to "/core/settings/ajax/setquota.php". Additionally,...