Owncloud

Owncloud

116 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2012-4393

Exploit
  • EPSS 0.16%
  • Published 05.09.2012 23:55:02
  • Last modified 11.04.2025 00:51:21

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) addBookmark.php, (2) delBookmark.php, or (3) editBookmark.php in book...

4.3

CVE-2012-4394

Exploit
  • EPSS 0.25%
  • Published 05.09.2012 23:55:02
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter.

4.3

CVE-2012-2269

Exploit
  • EPSS 0.86%
  • Published 20.04.2012 10:55:01
  • Last modified 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to apps/contacts/ajax/addcard.php, (2) the parameter parameter to apps/contacts/ajax...

5.8

CVE-2012-2270

Exploit
  • EPSS 23.05%
  • Published 20.04.2012 10:55:01
  • Last modified 11.04.2025 00:51:21

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

6.8

CVE-2012-2397

  • EPSS 0.2%
  • Published 20.04.2012 10:55:01
  • Last modified 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via vectors involving contacts.

4.3

CVE-2012-2398

  • EPSS 0.29%
  • Published 20.04.2012 10:55:01
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4.