Description

Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.

Remediation

References

CVE-2014-4929

Related Vulnerabilities

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20151)

WordPress Plugin Store Locator for WordPress with Google Maps-LotsOfLocales SQL Injection (3.33.1)

Oracle Application Server Other Vulnerability (CVE-2002-1858)

Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2011-0419)

WordPress Plugin CMS Tree Page View 'cms_tpv_view' Parameter Cross-Site Scripting (0.8.8)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-22 CVE-2014-4929