NetSight
medium4.6

CVE-2013-0204

settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings.

Impact

settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings.

Affected products

VendorProductAffected versions
OwncloudOwncloud Server
Versions 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5

Weakness classification

References