CVE

Id
58853  
CVE No.
CVE-2012-5610  
Status
Candidate  
Description
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
601898 58853 CVE-2012-5610 MLIST:[oss-security] 20121130 Re: CVE Request: owncloud  View
601899 58853 CVE-2012-5610 URL:http://www.openwall.com/lists/oss-security/2012/11/30/3  View
601900 58853 CVE-2012-5610 CONFIRM:http://owncloud.org/changelog/  View
601901 58853 CVE-2012-5610 CONFIRM:http://owncloud.org/security/advisories/oc-sa-2012-005/  View
601902 58853 CVE-2012-5610 CONFIRM:https://github.com/owncloud/core/commit/3cd416b667  View
601903 58853 CVE-2012-5610 CONFIRM:https://github.com/owncloud/core/commit/4b86c43  View
601904 58853 CVE-2012-5610 CONFIRM:https://github.com/owncloud/core/commit/6540c0fc63  View
601905 58853 CVE-2012-5610 CONFIRM:https://github.com/owncloud/core/commit/f599267  View
601906 58853 CVE-2012-5610 SECUNIA:51357  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29884 JVNDB-2012-005591 Oracle MySQL および MariaDB におけるユーザ名を列挙される脆弱性 Oracle MySQL および MariaDB は、ユーザ名の存在有無に応じて異なる遅延時間を要する異なるエラーメッセージを生成するため、存在するユーザ名を列挙される脆弱性が存在します。 CVE-2012-5615 58853 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005591.html  View