CVE-2014-1665

概要

参考情報

• blog.noobroot.com/2014/02/owncloud-600a-when-xss-vulnerability.html · Exploit
• securityfocus.com/bid/65457 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/91012 · Third Party Advisory
• packetstormsecurity.com/files/125086 · Exploit
• exploit-db.com/exploits/31427 · Exploit

owncloud のその他の脆弱性

• CVE-2022-43679中 5.3The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be…
• CVE-2022-31649高 7.5ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
• CVE-2021-35948中 5.4Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protectio…
• CVE-2021-35946緊急 9.8A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele…
• CVE-2021-35949中 5.3The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and …