Description

Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions.

Remediation

References

CVE-2013-7344

Related Vulnerabilities

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-4043)

WordPress Plugin Permalink Manager Lite Cross-Site Scripting (2.2.14)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4280)

WordPress Plugin Photo Gallery by Ays-Responsive Image Gallery SQL Injection (1.0.0)

WordPress Plugin Cart66 Pro Arbitrary File Disclosure (1.5.3)

Severity

Medium

Classification

CVE-2013-7344

Tags

Missing Update Known Vulnerabilities