← Back

Getid3

getid3

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Getid3
getid3

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Getid3
1Getid3
Nov 21, 2024
Oct 1, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.
2Getid3
Owncloud
2Getid3
Owncloud Server
May 6, 2026
Jun 4, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity...Show more
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.Show less