CVE

Id
58852  
CVE No.
CVE-2012-5609  
Status
Candidate  
Description
Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
601891 58852 CVE-2012-5609 MLIST:[oss-security] 20121130 Re: CVE Request: owncloud  View
601892 58852 CVE-2012-5609 URL:http://www.openwall.com/lists/oss-security/2012/11/30/3  View
601893 58852 CVE-2012-5609 CONFIRM:http://owncloud.org/changelog/  View
601894 58852 CVE-2012-5609 CONFIRM:http://owncloud.org/security/advisories/oc-sa-2012-004/  View
601895 58852 CVE-2012-5609 CONFIRM:https://github.com/owncloud/core/commit/4619c66  View
601896 58852 CVE-2012-5609 CONFIRM:https://github.com/owncloud/core/commit/e8a0cea  View
601897 58852 CVE-2012-5609 SECUNIA:51357  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29883 JVNDB-2012-005590 Oracle MySQL および MariaDB におけるサービス運用妨害 (mysqld クラッシュ) の脆弱性 Oracle MySQL および MariaDB には、サービス運用妨害 (mysqld クラッシュ) 状態となる脆弱性が存在します。 CVE-2012-5614 58852 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005590.html  View