Unrated severityNVD Advisory· Published Dec 18, 2012· Updated Jun 16, 2026
CVE-2012-5610
CVE-2012-5610
Description
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.7:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- owncloud.org/changelog/nvdPatch
- owncloud.org/security/advisories/oc-sa-2012-005/nvdPatchVendor Advisory
- github.com/owncloud/core/commit/4b86c43nvdPatch
- github.com/owncloud/core/commit/f599267nvdPatch
- secunia.com/advisories/51357nvdVendor Advisory
- www.openwall.com/lists/oss-security/2012/11/30/3nvd
- github.com/owncloud/core/commit/3cd416b667nvd
- github.com/owncloud/core/commit/6540c0fc63nvd
News mentions
0No linked articles in our index yet.