NVD

Id
46726  
Name
CVE-2012-5610  
Description
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-12-17  
Modified Date
2012-12-18  
Seq
2012-5610  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234016 46726 CVE-2012-5610 http://owncloud.org/changelog/  View
234017 46726 CVE-2012-5610 http://owncloud.org/security/advisories/oc-sa-2012-005/  View
234018 46726 CVE-2012-5610 [oss-security] 20121130 Re: CVE Request: owncloud  View
234019 46726 CVE-2012-5610 https://github.com/owncloud/core/commit/3cd416b667  View
234020 46726 CVE-2012-5610 https://github.com/owncloud/core/commit/4b86c43  View
234021 46726 CVE-2012-5610 https://github.com/owncloud/core/commit/6540c0fc63  View
234022 46726 CVE-2012-5610 https://github.com/owncloud/core/commit/f599267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30033 JVNDB-2012-005740 ownCloud の lib/filesystem.php における任意の PHP コードを実行される脆弱性 ownCloud の lib/filesystem.php は、不完全なブラックリストにより、任意の PHP コードを実行される脆弱性が存在します。 CVE-2012-5610 58848 CVE-2012-5610 46726 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005740.html 2012-11-13 2012-12-19 View