Description
Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.
Remediation
References
Related Vulnerabilities
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9547)
WordPress Plugin Mobile blocks Security Bypass (1.0)
WordPress Plugin Google XML Sitemaps Cross-Site Scripting (4.0.8)
WordPress Plugin Last.fm Rotation Local File Inclusion (1.0)
WordPress Plugin Cookie Law Bar Cross-Site Scripting (1.2.1)