EIP-2026-103307

PRE-CVE

ownCloud 10.3.0 stable - Cross-Site Request Forgery

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103307. PoCs published by Ozer Goker.

AI-analyzed exploit summary This exploit demonstrates multiple CSRF vulnerabilities in ownCloud 10.3.0, allowing unauthorized actions such as creating/deleting folders, users, and groups, as well as modifying user details. The PoC includes raw HTTP requests with valid session tokens and cookies.

Description

ownCloud 10.3.0 stable - Cross-Site Request Forgery

Exploits (1)

exploitdb WORKING POC

by Ozer Goker · textwebappslinux

https://www.exploit-db.com/exploits/47571

View Code ZIP pw:eip

This exploit demonstrates multiple CSRF vulnerabilities in ownCloud 10.3.0, allowing unauthorized actions such as creating/deleting folders, users, and groups, as well as modifying user details. The PoC includes raw HTTP requests with valid session tokens and cookies.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: ownCloud 10.3.0

Auth required

Prerequisites: Valid session cookies · Target user must be authenticated

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026