Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2046
HistoryMar 09, 2014 - 12:00 a.m.

CVE-2013-2046

2014-03-0900:00:00
ubuntu.com
ubuntu.com
10

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.001

Percentile

49.9%

SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x
before 4.5.11 and 5.x before 5.0.6 allows remote authenticated users to
execute arbitrary SQL commands via unspecified vectors.

Notes

Author Note
jdstrand per upstream, 4.5 and higher

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.001

Percentile

49.9%