CVE-2013-1893

SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to the contacts application.

Date published : 2014-03-07

http://www.securityfocus.com/bid/58855

http://owncloud.org/about/security/advisories/oC-SA-2013-012