medium6.5
CVE-2013-1850
Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud before 4.0.13 and 4.5.x before 4.5.…
Impact
Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud before 4.0.13 and 4.5.x before 4.5.8 allow remote authenticated users to execute arbitrary PHP code by uploading a .htaccess file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud Server | Versions 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5 |
| Owncloud | Owncloud | through 4.0.12 |