CVE-2013-2046
SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Date published : 2014-03-07
http://www.securityfocus.com/bid/59969
http://owncloud.org/about/security/advisories/oC-SA-2013-019