CVE-2012-4389

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted…

published September 5, 2012

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03286 · 88.3th percentile
Published
2012-09-05T23:00Z
EPSS history
Timeline
  • 05 SEP 23:00Z
    Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted…
    cvelistv5