What is CVE-2013-0303?

CVE-2013-0303 is a vulnerability in Owncloud. Published 2014-03-24.

Is CVE-2013-0303 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Owncloud

CVE-2013-0303

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344.

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

Owncloud
Owncloud Owncloud_server — versions 4.0.0, 4.0.1, 4.0.2
N/a — versions n/a

Public proof-of-concept exploits

CiscoCXSecurity/ownCloud_RCE_CVE-2013-0303
CiscoCXSecurity/ownCloud_

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-0303?: CVE-2013-0303 is a vulnerability in Owncloud. Published 2014-03-24.
Is CVE-2013-0303 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.