Description

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.

Remediation

References

CVE-2012-4389

Related Vulnerabilities

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Cross-Site Scripting (2.9.17)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3278)

WordPress Plugin TheCartPress eCommerce Shopping Cart Multiple Vulnerabilities (1.5.3.6)

WordPress Cookies Security Bypass Weakness (1.5 - 2.3.1)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1451)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2012-4389