Description

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.

Remediation

References

CVE-2012-5609

Related Vulnerabilities

Drupal Core Security Bypass (8.0.0 - 9.2.21)

Liferay DXP CVE-2024-25148 Vulnerability (CVE-2024-25148)

WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress Cross-Site Scripting (1.0.6)

Jenkins Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-1000067)

WordPress Plugin Dropbox Folder Share Local File Inclusion (1.9.7)

Severity

Medium

Classification

CVE-2012-5609

Tags

Missing Update Known Vulnerabilities