This host is installed with ownCloud and is prone to multiple cross-site scripting vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitrary script code in a user's browser within the trust relationship between their browser and the server. Impact Level: Application

Upgrade to ownCloud version 4.5.12 or 5.0.7 or later, For updates refer to http://owncloud.org

Multiple flaws exists due to insufficient validation of user-supplied input passed via the unspecified vectors to js/viewer.js script.

ownCloud Server before version 4.5.12 and 5.0.x before version 5.0.7

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://owncloud.org/about/security/advisories/oc-sa-2013-028
• http://seclists.org/oss-sec/2013/q2/514

---

Updated on 2017-03-28