cbcvebase.
CVE-2012-5610
published 2012-12-18

CVE-2012-5610: Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary…

PriorityP335medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
2.17%
80.0th percentile
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.

Affected

13 ranges
VendorProductVersion rangeFixed in
owncloudowncloud<= 4.0.8—
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
owncloudowncloud_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.