[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-1851Date: (C)2015-12-16   (M)2023-12-22


Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the user_migrate application is enabled, allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.5
Exploit Score: 6.8
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
http://owncloud.org/about/security/advisories/oC-SA-2013-010/

CPE    25
cpe:/a:owncloud:owncloud:4.0.0
cpe:/a:owncloud:owncloud:4.0.11
cpe:/a:owncloud:owncloud:4.0.1
cpe:/a:owncloud:owncloud:4.0.10
...

© SecPod Technologies