Unscored CVE-2012-5609 EUVD-2012-5495GHSA-5m87-5j4w-qvwf

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP c…

Published Dec 18, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.

References

https://github.com/owncloud/core/commit/4619c66
51357 third-party-advisory
https://github.com/owncloud/core/commit/e8a0cea
[oss-security] 20121130 Re: CVE Request: owncloud mailing-list
http://owncloud.org/changelog/
http://owncloud.org/security/advisories/oc-sa-2012-004/