Description
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.
Remediation
References
Related Vulnerabilities
Jenkins Incorrect Authorization Vulnerability (CVE-2021-21692 )
WordPress Plugin Flight Search Widget and Blocks Cross-Site Scripting (1.1.0)
SharePoint Integer Overflow or Wraparound Vulnerability (CVE-2025-26642)
Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-8156)
Jboss EAP Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-10212)