Description

Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.

Remediation

References

CVE-2012-5610

Related Vulnerabilities

Oracle Database Server Other Vulnerability (CVE-2002-0856)

Oracle Database Server CVE-2015-4755 Vulnerability (CVE-2015-4755)

WordPress Plugin Stop User Enumeration User Enumeration (1.3.4)

WordPress Plugin All-in-One WP Migration Remote Code Execution (2.0.2)

Joomla! Core Privilege Escalation (1.6.0 - 3.6.4)

Severity

Medium

Classification

CVE-2012-5610 CWE-20

Tags

Missing Update Known Vulnerabilities