medium4.6
CVE-2013-2089
Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted file, then a…
Impact
Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted file, then accessing it via a direct request to the file in /data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | through 5.0.5 |
| Owncloud | Owncloud Server | Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4 |