Unscored severity · published Mar 9, 2014
CVE-2013-2046
SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands…
–
CVSS
1.6%
EPSS
No
On KEV
Description
SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Owncloud Server · Owncloud
4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.4; 4.5.5; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2046
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2046
osvdb.org
http://osvdb.org/93383
Vendor Advisory
http://owncloud.org/about/security/advisories/oC-SA-2013-019
seclists.org
http://seclists.org/oss-sec/2013/q2/324
www.securityfocus.com
http://www.securityfocus.com/bid/59969
More from Owncloud Server
9.8
CVE-2023-49105
ownCloud Improper Authentication Vulnerability
9.8
CVE-2014-2052
Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other…
8.5
CVE-2016-1499
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly…
6.5
CVE-2021-29659
ownCloud 10.7 has an incorrect access control vulnerability, leading to remote information disclosure
6.5
CVE-2014-2050
Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests…