apps.owncloud.com: Malicious file upload leads to remote code execution

Disclosed: 2015-09-01 12:09:59 By imadchabounia To owncloud
Unknown
Vulnerability Details
Hello ownCloud Security Team, i am here to report a critical security vulnerability . Proof of concept : https://apps.owncloud.com/CONTENT/content-pre1/171172-1.php5 code source of uploaded file : <?php phpinfo(); ?>
Actions
View on HackerOne
Report Stats
  • Report ID: 84374
  • State: Closed
  • Substate: resolved
  • Upvotes: 6
Share this report