VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 4, 2014· Updated Jun 17, 2026

CVE-2014-2056

CVE-2014-2056

Description

PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

Affected products

21
  • OwnCloud/Server18 versions
    cpe:2.3:a:owncloud:owncloud_server:*:a:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:owncloud:owncloud_server:*:a:*:*:*:*:*:*range: <=5.0.14
    • cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.14:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:5.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:6.0.1:*:*:*:*:*:*:*
  • Phpdocx/Phpdocx2 versions
    cpe:2.3:a:phpdocx:phpdocx:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phpdocx:phpdocx:-:*:*:*:*:*:*:*
    • (no CPE)
  • OwnCloud/Owncloudllm-fuzzy
    Range: <5.0.15, >=6.0.0 <6.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.