Description

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.

Remediation

References

CVE-2012-4389

Related Vulnerabilities

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6533)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2325)

Oracle HTTP Server CVE-2020-2530 Vulnerability (CVE-2020-2530)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46731)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4856)

Severity

Medium

Classification

CVE-2012-4389

Tags

Missing Update Known Vulnerabilities