This host is installed with ownCloud and is prone to remote code execution vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary php code. Impact Level: Application

Upgrade to ownCloud version 4.5.6 or later, For updates refer to http://owncloud.org

The flaw exists as the input passed via the '/settings/personal.php' script is not properly sanitized before being returned to the user.

ownCloud Server 4.5.x before 4.5.6

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://owncloud.org/security/advisory/?id=oC-SA-2013-002
• http://secunia.com/advisories/51872
• http://www.osvdb.com/89507

---

Updated on 2015-03-25