Security Advisory

CVE-2012-4389

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-05 23:00:00
Last updated 2024-09-16 23:46:06
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.