EDB-32162

functional

ownCloud 4.0.x/4.5.x - 'upload.php?Filename' Remote Code Execution

view exploit source exploit_dbverifiedtype webappsauthor Portcullispublished 2014-03-10catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-2044UShigh7.5Exploit
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upl…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan