Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ownCloud Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2014-2044 - Vulnerability Database
ownCloud

ownCloud Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2014-2044

High
Reference: CVE-2014-2044
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-2044
Title: ownCloud Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0 when running on Windows allows remote authenticated users to bypass intended access restrictions upload files with arbitrary names and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter as demonstrated using .htaccess::DATA to upload a PHP program.