Vulnerabilities

TI-2021-17829 CVE-2021-40926 · GHSA-x2gw-85w6-fjjw

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and…

LOW 29

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01008 Published 2021-10-01 Fixed in 1.9.21 CWE-79

TI-2014-01614 CVE-2014-2053 · GHSA-5v43-55m5-qr8f

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2…

MEDIUM 40

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04681 Published 2014-06-04 Fixed in 1.9.9 CWE-611

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and…

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2…