Description
ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2014-4294 Vulnerability (CVE-2014-4294)
WordPress Plugin ARMember-Content Restriction & Membership Security Bypass (1.4)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (6.4.2)
WordPress Plugin Bird Feeder Multiple Vulnerabilities (1.2.3)
WordPress Plugin WP Js External Link Info Open Redirect (1.21)