Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

owncloud owncloud 4.5.7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-1822
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x prior to 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the (1) quota parameter to /core/settings/ajax/setquota.php, or remote authenticated user...
Owncloud Owncloud 4.5.0Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6
NA
CVE-2013-1963
The contacts application in ownCloud prior to 4.5.10 and 5.x prior to 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.
Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.4Owncloud OwncloudOwncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.0
NA
CVE-2013-2046
SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x prior to 4.5.11 and 5.x prior to 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.9Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.0Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.10Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.4Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.2
NA
CVE-2013-2043
apps/calendar/ajax/events.php in ownCloud prior to 4.5.11 and 5.x prior to 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download arbitrary calendars via the calendar_id parameter.
Owncloud Owncloud 4.5.0Owncloud Owncloud 5.0.0Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.9Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.1Owncloud OwncloudOwncloud Owncloud 4.5.2Owncloud Owncloud 4.5.3Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.5Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.6
NA
CVE-2013-1850
Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud prior to 4.0.13 and 4.5.x prior to 4.5.8 allow remote authenticated users to execute arbitrary PHP code by uploading a .htaccess file.
Owncloud Owncloud 4.5.0Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.1Owncloud Owncloud 4.0.4Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.7Owncloud Owncloud 3.0.0Owncloud Owncloud 3.0.2Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.2Owncloud Owncloud 4.0.9Owncloud Owncloud 3.0.3Owncloud Owncloud 4.0.0Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.10Owncloud Owncloud 3.0.1
NA
CVE-2013-1851
Incomplete blacklist vulnerability in lib/migrate.php in ownCloud prior to 4.0.13 and 4.5.x prior to 4.5.8, when the user_migrate application is enabled, allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors.
Owncloud Owncloud 3.0.2Owncloud Owncloud 3.0.3Owncloud Owncloud 4.0.0Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.10Owncloud Owncloud 3.0.1Owncloud OwncloudOwncloud Owncloud 4.0.3Owncloud Owncloud 4.0.8Owncloud Owncloud 4.0.4Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.7Owncloud Owncloud 3.0.0Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.2Owncloud Owncloud 4.0.9Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.6
NA
CVE-2013-1941
The installation routine in ownCloud Server prior to 4.0.14, 4.5.x prior to 4.5.9, and 5.0.x prior to 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote malicious users to guess the password via a brute f...
Owncloud Owncloud 4.0.11Owncloud OwncloudOwncloud Owncloud 4.0.6Owncloud Owncloud 4.0.8Owncloud Owncloud 4.0.2Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.4Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.0Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.10Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.7Owncloud Owncloud 4.0.9Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.0Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.5
NA
CVE-2013-2039
Directory traversal vulnerability in lib/files/view.php in ownCloud prior to 4.0.15, 4.5.x 4.5.11, and 5.x prior to 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors.
Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 4.0.10Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.13Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.9Owncloud Owncloud 4.0.1Owncloud OwncloudOwncloud Owncloud 4.0.3Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.7
NA
CVE-2013-2040
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud prior to 4.0.15, 4.5.x prior to 4.5.11, and 5.0.x prior to 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 4.5.1Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.13Owncloud OwncloudOwncloud Owncloud 5.0.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.9Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.5Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.8Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.7
NA
CVE-2013-2042
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud prior to 4.0.15, 4.5.x prior to 4.5.11, and 5.0.x prior to 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bo...
Owncloud Owncloud 5.0.0Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.9Owncloud Owncloud 4.0.0Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.9Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.6Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.13Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.7Owncloud Owncloud 5.0.5Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.10Owncloud Owncloud 4.5.2Owncloud OwncloudOwncloud Owncloud 4.0.2Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook