Unrated severityNVD Advisory· Published Mar 9, 2014· Updated Jun 16, 2026

CVE-2013-1893

Description

SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to the contacts application.

Affected products

OwnCloud/Owncloud2 versions
cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*range: <=5.0.0
- (no CPE)range: <5.0.1

Patches

Vulnerability mechanics

References

owncloud.org/about/security/advisories/oC-SA-2013-012nvdVendor Advisory
www.securityfocus.com/bid/58855nvd
exchange.xforce.ibmcloud.com/vulnerabilities/83253nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000