ownCloud · Report #84374

apps.owncloud.com: Malicious file upload leads to remote code execution

Validstatus

9upvotes

1 Sept 2015disclosed

How it was found

Hello ownCloud Security Team,

i am here to report a critical security vulnerability .

Proof of concept :

code source of uploaded file :

<?php phpinfo(); ?>

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original