CVE

Id
60148  
CVE No.
CVE-2013-0201  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING to core/lostpassword/templates/resetpassword.php, (2) mime parameter to apps/files/ajax/mimeicon.php, or (3) token parameter to apps/gallery/sharing.php.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607138 60148 CVE-2013-0201 CONFIRM:http://owncloud.org/about/security/advisories/oC-SA-2013-001  View
607139 60148 CVE-2013-0201 CONFIRM:https://github.com/owncloud/core/commit/4e2b834  View
607140 60148 CVE-2013-0201 CONFIRM:https://github.com/owncloud/core/commit/b8e0309  View
607141 60148 CVE-2013-0201 OSVDB:89505  View
607142 60148 CVE-2013-0201 URL:http://osvdb.org/89505  View
607143 60148 CVE-2013-0201 OSVDB:89506  View
607144 60148 CVE-2013-0201 URL:http://osvdb.org/89506  View
607145 60148 CVE-2013-0201 OSVDB:89511  View
607146 60148 CVE-2013-0201 URL:http://osvdb.org/89511  View
607147 60148 CVE-2013-0201 XF:owncloud-mime-token-xss(81475)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20374 JVNDB-2013-001949 Drupal 用 Live CSS モジュールにおける任意のコードを実行される脆弱性 Drupal 用 Live CSS モジュールには、ファイルをアップロードされることにより、任意のコードを実行される脆弱性が存在します。 CVE-2013-0206 60148 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001949.html  View