Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2013-2040

Related Vulnerabilities

Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)

WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)

MySQL CVE-2018-3058 Vulnerability (CVE-2018-3058)

MySQL CVE-2021-2339 Vulnerability (CVE-2021-2339)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-9402)

Severity

Low

Classification

CVE-2013-2040 CWE-707

Tags

Missing Update Known Vulnerabilities