Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) unspecified parameters to apps/calendar/ajax/event/new.php or (2) url parameter to apps/bookmarks/ajax/addBookmark.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ownCloud 跨站脚本漏洞
Vulnerability Description
ownCloud是美国ownCloud公司的一套个人云存储解决方案。 OwnCloud 4.0.10及之前版本和4.5.5及之前版本中存在跨站脚本漏洞，该漏洞源于通过POST参数传递给apps/calendar/ajax/event/new.php，url参数传递给apps/bookmarks/ajax/addBookmark.php的输入在返回用户之前缺少过滤。攻击者可利用这些漏洞注入任意HTML和脚本代码，可获得敏感信息或者劫持用户会话。
CVSS Information
N/A
Vulnerability Type
N/A