Description
Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344.
Remediation
References
Related Vulnerabilities
WordPress Plugin Conduit Banner 'banner-index-field-id' Parameter Cross-Site Scripting (0.2)
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2020-27223)
WordPress Plugin VideoWhisper Video Presentation 'vw_upload.php' Arbitrary File Upload (3.17)
WordPress Plugin Opal Estate Cross-Site Request Forgery (1.6.11)
Ampache Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-4665)