Total vulnerabilities in the database
The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; (semicolon) character in a file.
| Software | From | Fixed in |
|---|---|---|
| owncloud / owncloud | 7.0.4 | 7.0.4.x |
| owncloud / owncloud | 7.0.1 | 7.0.1.x |
| owncloud / owncloud | 7.0.2 | 7.0.2.x |
| owncloud / owncloud | 8.0.3 | 8.0.3.x |
| owncloud / owncloud | - | 6.0.7.x |
| owncloud / owncloud | 7.0.3 | 7.0.3.x |
| owncloud / owncloud | 7.0.5 | 7.0.5.x |
| owncloud / owncloud | 7.0.0 | 7.0.0.x |
| owncloud / owncloud | 8.0.2 | 8.0.2.x |
| owncloud / owncloud | 8.0.0 | 8.0.0.x |