owncloud < 4.5.2 - Authenticated Remote Code Execution via ZIP File Upload
Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.