Test ID:	1.3.6.1.4.1.25623.1.0.809297
Category:	Web application abuses
Title:	ownCloud 'share.js' Gallery Application XSS Vulnerability - Windows
Summary:	ownCloud is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: ownCloud is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw exists due to a recent migration of the gallery app to the new sharing endpoint and a parameter changed from an integer to a string value which is not sanitized properly. Vulnerability Impact: Successful exploitation will allow remote authenticated users to inject arbitrary web script or HTML. Affected Software/OS: ownCloud Server before 9.0.4 on Windows. Solution: Upgrade to ownCloud Server 9.0.4 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7419 BugTraq ID: 92373 http://www.securityfocus.com/bid/92373 https://hackerone.com/reports/145355
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.