what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Christian Fischer

ownCloud Phpinfo Reader

Posted Aug 31, 2024

Authored by h00die, Ron Bowes, creacitysec, Christian Fischer, random-robbie | Site metasploit.com

Docker containers of ownCloud compiled after February 2023, which have version 0.2.0 before 0.2.1 or 0.3.0 before 0.3.1 of the app graph installed contain a test file which prints phpinfo() to an unauthenticated user. A post file name must be appended to the URL to bypass the login filter. Docker may export sensitive environment variables including ownCloud, DB, redis, SMTP, and S3 credentials, as well as other host information.

tags | exploit

advisories | CVE-2023-49103

SHA-256 | c842a41fbb657cad7419181e3093fbff8fdbb245a42bb73c77e84f9cbda710ff

Download | Favorite | View