Getid3

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-40926 PHP MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Getid3

NVD GitHub

CVSS 3.1

6.1

EPSS

1.0%

CVE-2014-2053 PHP HIGH PATCH This Week

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service XXE Getid3 Owncloud Server

NVD

CVSS 2.0

7.5

EPSS

3.5%

CVE-2021-40926 PHP

EPSS 1% CVSS 6.1

MEDIUM POC PATCH This Month

PHP XSS Getid3

NVD GitHub

CVE-2014-2053 PHP

EPSS 3% CVSS 7.5

HIGH PATCH This Week

Denial Of Service XXE Getid3 +1

NVD