Description
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.
Remediation
References
Related Vulnerabilities
WordPress Plugin Availability Calendar SQL Injection (1.2)
WordPress Plugin Loginizer SQL Injection (1.6.3)
Collabtive Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5285)
WordPress Plugin iThemes Sync Security Bypass (2.0.17)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3641)