Description

Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted file, then accessing it via a direct request to the file in /data.

Remediation

References

CVE-2013-2089

Related Vulnerabilities

WordPress Plugin WP Table Builder-WordPress Table Cross-Site Scripting (1.4.6)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Arbitrary File Upload (1.06.02)

WordPress Plugin Clik stats Open Redirect (0.8)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-2091)

WordPress Plugin FluentAuth-The Ultimate Authorization & Security for WordPress Security Bypass (1.0.1)

Severity

Medium

Classification

CVE-2013-2089

Tags

Missing Update Known Vulnerabilities