Test ID:	1.3.6.1.4.1.25623.1.0.809292
Category:	Web application abuses
Title:	ownCloud Multiple Vulnerabilities (Sep 2016) - Windows
Summary:	ownCloud is prone to multiple vulnerabilities.
Description:	Summary: ownCloud is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to - The external SMB storage of ownCloud was not properly neutralizing all special elements. - The filename sanitization component does not properly handle $_GET parameters cast by PHP to an array Vulnerability Impact: Successful exploitation will allow remote authenticated users to execute arbitrary SMB commands and to cause a denial of service. Affected Software/OS: ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 on Windows. Solution: Upgrade ownCloud server 6.0.8, 7.0.6, 8.0.4 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4718 BugTraq ID: 76162 http://www.securityfocus.com/bid/76162 Debian Security Information: DSA-3373 (Google Search) http://www.debian.org/security/2015/dsa-3373 Common Vulnerability Exposure (CVE) ID: CVE-2015-4717 BugTraq ID: 76161 http://www.securityfocus.com/bid/76161
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.