Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2013-7344

EPSS 0.53% · P67
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-7344

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OwnCloud 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OwnCloud是德国OwnCloud公司的一套免费且开源的个人云存储解决方案;OwnCloud Server是一个服务器版。PHPExcel是一个基于微软的OpenXML标准和PHP语言的用于操作Office Excel文档的PHP类库,它能够读取、写入不同格式的电子表格。该方案提供文件管理、音乐存储、日历等功能。 OwnCloud 4.0.11及之前版本和4.5.0至4.5.5版本中的core/settings.php脚本存在安全漏洞。远程攻击者可利用该漏洞执行任意PHP代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-7344

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-7344

Please Login to view more intelligence information

Same Patch Batch · n/a · 2014-03-23 · 10 CVEs total

CVE-2014-2586McAfee Cloud Single Sign On 跨站脚本漏洞
CVE-2014-2587McAfee Asset Manager SQL注入漏洞
CVE-2014-2588McAfee Asset Manager 目录遍历漏洞
CVE-2014-2589Dell SonicWALL NSA 2400‘stats/dashboard.jsp’跨站脚本漏洞
CVE-2014-2585OwnCloud 输入验证漏洞
CVE-2013-0303OwnCloud 多个任意PHP代码执行漏洞
CVE-2013-7345file 权限许可和访问控制问题漏洞
CVE-2014-0016Stunnel 加密问题漏洞
CVE-2014-2057OwnCloud 跨站脚本漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2013-7344

No comments yet


Leave a comment