Description

Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4.

Remediation

References

CVE-2012-2398

Related Vulnerabilities

Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8793)

PHP Numeric Errors Vulnerability (CVE-2012-2386)

WordPress Plugin Sabre 'tools.php' Cross-Site Scripting (1.2.0)

OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2023-5678)

WordPress Plugin Events Shortcodes For The Events Calendar Security Bypass (1.9.4)

Severity

Medium

Classification

CVE-2012-2398 CWE-707

Tags

Missing Update Known Vulnerabilities