This host is installed with ownCloud and is prone to session fixation vulnerability.

Successful exploitation will allow remote attackers to gain access to arbitrary files and execute arbitrary script code in a user's browser within the trust relationship between their browser and the server. Impact Level: Application

Upgrade to ownCloud version 4.0.15 or 4.5.11 or 5.0.6 or later. For updates refer to http://owncloud.org

Multiple flaws are due, - Insufficient validation of user-supplied input passed via the 'url' parameter to the apps/bookmarks/ajax/addBookmark.php & apps/bookmarks/ajax/editBookmark.php scripts. - Improper sanitization of user-supplied input passed via unspecified vectors to lib/files/view.php, media/js/playlist.js, media/js/player.js or media/js/collection.js script.

ownCloud Server 4.x before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://owncloud.org/about/security/advisories/oC-SA-2013-020
• http://owncloud.org/about/security/advisories/oC-SA-2013-021
• http://seclists.org/oss-sec/2013/q2/324
• http://www.osvdb.com/93379
• http://www.osvdb.com/93380
• http://www.osvdb.com/93381

---

Updated on 2015-03-25