Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) readyCallback parameter to apps/files_odfviewer/src/webodf/webodf/flashput/PUT.swf, the (2) root parameter to apps/gallery/templates/index.php, or a (3) malformed query to lib/db.php.

Remediation

References

CVE-2012-5056

Related Vulnerabilities

WordPress Plugin WooCommerce Privilege Escalation (3.5.0)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10379)

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60203)

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0773)

MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13076)

Severity

Medium

Classification

CVE-2012-5056 CWE-707

Tags

Missing Update Known Vulnerabilities