CVE-2013-2089
owncloud < 5.0.6 - Authenticated Remote Code Execution via File Upload
Title source: llmDescription
Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted file, then accessing it via a direct request to the file in /data.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://owncloud.org/about/security/advisories/oC-SA-2013-026/
Scores
EPSS
0.0039
EPSS Percentile
60.3%
Details
Status
published
Products (6)
owncloud/owncloud
< 5.0.5
owncloud/owncloud_server
5.0.0
owncloud/owncloud_server
5.0.1
owncloud/owncloud_server
5.0.2
owncloud/owncloud_server
5.0.3
owncloud/owncloud_server
5.0.4
Published
Mar 14, 2014
Tracked Since
Feb 18, 2026