CVE-2014-1665
Title: Owncloud Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS)
Proof Of Concept
PoC Available for CVE-2014-1665
CWE Category
CWE-79
Published Date
Mar 20, 2018
Modified Date
Nov 21, 2024
Exploit Status
Available
Score
5.4
CVSS v3.0
Exploit Probability (EPSS)
0.34%
Vulnerability Summary
CVE-2014-1665: Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.
Impacted Vendors
Reference Links
http://blog.noobroot.com/2014/02/owncloud-600a-when-xss-vulnerability.html
http://www.securityfocus.com/bid/65457
https://exchange.xforce.ibmcloud.com/vulnerabilities/91012
https://packetstormsecurity.com/files/125086
https://www.exploit-db.com/exploits/31427/
http://blog.noobroot.com/2014/02/owncloud-600a-when-xss-vulnerability.html
http://www.securityfocus.com/bid/65457
https://exchange.xforce.ibmcloud.com/vulnerabilities/91012
https://packetstormsecurity.com/files/125086
https://www.exploit-db.com/exploits/31427/
CVSS v3.0
Source Entity
[email protected]
Severity
MEDIUM
5.4
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
REQUIRED
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
CHANGED
RAW VECTOR
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0
Source Entity
[email protected]
Severity
LOW
3.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:M/Au:S/C:N/I:P/A:N
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2014-1665 Exploits & PoCs (Proof Of Concept)
Exploit-DB
https://www.exploit-db.com/exploits/31427
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
REQUIRED
CVSS Vector String
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected Stack
No specific products linked.