Description

Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.

Remediation

References

CVE-2014-4929

Related Vulnerabilities

ownCloud Session Fixation Vulnerability (CVE-2021-35948)

Internet Information Services Other Vulnerability (CVE-2001-0335)

Oracle JRE CVE-2014-0460 Vulnerability (CVE-2014-0460)

WordPress Plugin Contact Form 7 Database Information Disclosure (1.3)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1878)

Severity

Medium

Classification

CVE-2014-4929 CWE-22

Tags

Missing Update Known Vulnerabilities