Owncloud Server Security Vulnerabilities and Issues — Owncloud Server CVE List

Lucene search

OwncloudOwncloud Server

2 matches found

CVE•added 2013/01/03 1:55 a.m.•51 views

CVE-2012-5665

ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by editing this file.

4.3CVSS6.9AI score0.00431EPSS

CVE•added 2013/01/03 1:55 a.m.•45 views

CVE-2012-5666

Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to apps/bookmark/index.php.

4.3CVSS5.9AI score0.00407EPSS

Web