CVE-2013-0204

settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-06-04 14:55

Updated : 2024-02-04 18:35


NVD link : CVE-2013-0204

Mitre link : CVE-2013-0204

CVE.ORG link : CVE-2013-0204


JSON object : View

Products Affected

owncloud

  • owncloud
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')