CVE-2013-1893
owncloud < 5.0.0 - Authenticated SQL Injection in Contacts Application
Title source: llmDescription
SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to the contacts application.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
http://owncloud.org/about/security/advisories/oC-SA-2013-012
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/58855
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/83253
Scores
EPSS
0.0035
EPSS Percentile
57.7%
Details
CWE
CWE-89
Status
published
Products (1)
owncloud/owncloud
< 5.0.0
Published
Mar 09, 2014
Tracked Since
Feb 18, 2026