Unrated severityNVD Advisory· Published Mar 14, 2014· Updated Jun 16, 2026
CVE-2013-0307
CVE-2013-0307
Description
Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter.
Affected products
24cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- owncloud.org/about/security/advisories/oC-SA-2013-003/nvdVendor Advisory
News mentions
0No linked articles in our index yet.