CVE-2013-2045

Severity CVSS v4.0:
Pending analysis
Type:
CWE-89 SQL Injection
Publication date:
09/03/2014
Last modified:
12/04/2025

Description

SQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.5:*:*:*:*:*:*:*