CVE-2012-2270

Description

References

• archives.neohapsis.com/archives/bugtraq/2012-04/0127.html
• osvdb.org/81211
• owncloud.org/security/advisories/CVE-2012-2270
• packetstormsecurity.org/files/111956/ownCloud-3.0.0-Cross-Site-Scripting.html
• secunia.com/advisories/48850 · Vendor Advisory
• openwall.com/lists/oss-security/2012/08/11/1
• openwall.com/lists/oss-security/2012/09/02/2
• securityfocus.com/bid/53145
• tele-consulting.com/advisories/TC-SA-2012-01.txt · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/75029

Altre vulnerabilità di owncloud

• CVE-2022-43679MEDIO 5.3The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be…
• CVE-2022-31649ALTO 7.5ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
• CVE-2021-35948MEDIO 5.4Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protectio…
• CVE-2021-35946CRITICO 9.8A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele…
• CVE-2021-35949MEDIO 5.3The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and …