Show filters
33 Total Results
Displaying 31-33 of 33
Sort by:
Attacker Value
Unknown
CVE-2012-4752
Disclosure Date: September 05, 2012 (last updated October 05, 2023)
appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.
0
Attacker Value
Unknown
CVE-2012-4390
Disclosure Date: September 05, 2012 (last updated October 05, 2023)
(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-4391
Disclosure Date: September 05, 2012 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.
0
