| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | ≤ 4.0.12 | |
| owncloud server | = 3.0.0= 3.0.1= 3.0.2= 3.0.3= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.5.0= 4.5.1= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7 |
Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud before 4.0.13 and 4.5.x before 4.5.8 allow remote authenticated users to execute arbitrary PHP code by uploading a .htaccess file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free