EUVD-2013-0237

Malware in sbrugna...

CVE-2013-0202

Cross-site scripting XSS vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php...

CVE-2013-0202

Cross-site scripting XSS vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php...

CVE-2013-0202: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php...

PT-2019-6837

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.5, 4.0.10, and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the action parameter to "core/ajax/sharing.php" API endpoint. This enables attackers to perform cross-site...

PT-2014-2434

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.5 and earlier ownCloud version 4.0.10 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the QUERY STRING to...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...