VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 22, 2019· Updated Jun 16, 2026

CVE-2013-0203

CVE-2013-0203

Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) unspecified parameters to apps/calendar/ajax/event/new.php or (2) url parameter to apps/bookmarks/ajax/addBookmark.php.

Affected products

4
  • OwnCloud/Owncloud2 versions
    cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*range: <=4.0.10
    • (no CPE)range: <=4.5.5, <=4.0.10
  • OwnCloud/Server2 versions
    cpe:2.3:a:owncloud:owncloud_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:owncloud:owncloud_server:*:*:*:*:*:*:*:*range: >=4.5.0,<=4.5.5
    • (no CPE)range: 4.5.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.