Description

Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter.

Remediation

References

CVE-2013-0307

Related Vulnerabilities

WordPress Plugin Easy PayPal Events Unspecified Vulnerability (1.1.6)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2157)

OpenSSL Out-of-bounds Read Vulnerability (CVE-2017-3731)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2005-0543)

XWiki Transmission of Private Resources into a New Sphere ('Resource Leak') Vulnerability (CVE-2023-38509)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-0307