Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

owncloud owncloud 5.0.7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-6403
The admin page in ownCloud prior to 5.0.13 allows remote malicious users to bypass intended access restrictions via unspecified vectors, related to MariaDB.
Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud OwncloudOwncloud Owncloud 5.0.11Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.6
NA
CVE-2014-2051
ownCloud Server prior to 5.0.15 and 6.0.x prior to 6.0.2 allows remote malicious users to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login query."
Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.1Owncloud OwncloudOwncloud Owncloud 5.0.14Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.6Owncloud Owncloud 5.0.8
NA
CVE-2014-2585
ownCloud prior to 5.0.15 and 6.x prior to 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration.
Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.1Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.14Owncloud OwncloudOwncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.6Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.7
NA
CVE-2014-2056
PHPDocX, as used in ownCloud Server prior to 5.0.15 and 6.0.x prior to 6.0.2, allows remote malicious users to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Owncloud Owncloud 5.0.13Owncloud OwncloudOwncloud Owncloud 5.0.6Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Phpdocx Phpdocx -Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.14Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.9Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.1
NA
CVE-2014-3833
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server prior to 5.016 and 6.0.x prior to 6.0.3 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_une...
Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.14Owncloud OwncloudOwncloud Owncloud 5.0.2Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.6Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.1Owncloud Owncloud 6.0.2
NA
CVE-2014-3835
ownCloud Server prior to 5.0.16 and 6.0.x prior to 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.
Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.2Owncloud Owncloud 6.0.1Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.6Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.14Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.9Owncloud OwncloudOwncloud Owncloud 5.0.8
NA
CVE-2014-3838
ownCloud Server prior to 5.0.16 and 6.0.x prior to 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts.
Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.14Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.6Owncloud OwncloudOwncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.7Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.1Owncloud Owncloud 6.0.2
NA
CVE-2014-2054
PHPExcel prior to 1.8.0, as used in ownCloud Server prior to 5.0.15 and 6.0.x prior to 6.0.2, does not disable external entity loading in libxml, which allows remote malicious users to read arbitrary files, cause a denial of service, or possibly have other impact via an XML Exter...
Owncloud Owncloud 6.0.0Phpexcel Project PhpexcelOwncloud Owncloud 6.0.1Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.13Owncloud OwncloudOwncloud Owncloud 5.0.6Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.14Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.9
NA
CVE-2014-4929
Directory traversal vulnerability in the routing component in ownCloud Server prior to 5.0.17 and 6.0.x prior to 6.0.4 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.
Owncloud Owncloud 6.0.0Owncloud Owncloud 6.0.2Owncloud Owncloud 6.0.1Owncloud Owncloud 6.0.3Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.14Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.6Owncloud Owncloud 5.0.15Owncloud OwncloudOwncloud Owncloud 5.0.2Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.8Owncloud Owncloud 5.0.9
NA
CVE-2014-9045
The FTP backend in user_external in ownCloud Server prior to 5.0.18 and 6.x prior to 6.0.6 allows remote malicious users to bypass intended authentication requirements via a crafted password.
Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.6Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.12Owncloud Owncloud 5.0.13Owncloud Owncloud 5.0.14Owncloud Owncloud 6.0.1Owncloud Owncloud 6.0.2Owncloud Owncloud 6.0.3Owncloud Owncloud 6.0.4Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.16Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.7Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.15Owncloud OwncloudOwncloud Owncloud 5.0.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook