Description

Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the dir parameter.

Remediation

References

CVE-2013-2085

Related Vulnerabilities

WordPress Plugin Sender by BestWebSoft Multiple Vulnerabilities (0.7)

WordPress Plugin WBW Currency Switcher for WooCommerce Cross-Site Scripting (1.6.5)

Python Integer Overflow or Wraparound Vulnerability (CVE-2010-1449)

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5593)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9126)

Severity

Medium

Classification

CVE-2013-2085 CWE-22

Tags

Missing Update Known Vulnerabilities