Lucene search
RedhatCVE-2013-1890HistoryMar 09, 2014 - 1:16 p.m.
CVE-2013-1890
2014-03-0913:16:56
CWE-79
redhat
web.nvd.nist.gov
21
owncloud
xss
remote attackers
web script
html
security vulnerability
cve-2013-1890
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
56.9%
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) new_name parameter to apps/bookmarks/ajax/renameTag.php or (2) multiple unspecified parameters to unknown files in apps/contacts/ajax/.
Affected configurations
Node
owncloudowncloudRange≤5.0.0
Related
cvelist
cvelist
CVE-2013-1890
2014-03-07 20:00:00
ubuntucve
ubuntucve
CVE-2013-1890
2014-03-09 00:00:00
owncloud
owncloud
Server: Multiple XSS vulnerabilities
2013-04-02 11:42:22
Multiple XSS vulnerabilities - ownCloud
2013-04-02 17:46:59
prion
prion
Cross site scripting
2014-03-09 13:16:00
nvd
nvd
CVE-2013-1890
2014-03-09 13:16:56
fedora
fedora
[SECURITY] Fedora 18 Update: xmp-3.5.0-3.fc18
2013-05-31 04:28:51
[SECURITY] Fedora 17 Update: xmp-3.4.0-11.fc17
2013-05-31 04:29:34
openvas
openvas
Fedora Update for xmp FEDORA-2013-7135
2013-06-04 00:00:00
Fedora Update for xmp FEDORA-2013-7135
2013-06-04 00:00:00
ownCloud Multiple XSS and SQL Injection Vulnerabilities
2014-03-14 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
56.9%
Related for CVE-2013-1890