CVE-2014-2053

getID3 before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

getID3() XML外部实体漏洞

CVE ID：CVE-2014-2053 getID3是一款从MP3等媒体文件中提取文件信息的php类，既可以提取也能修改文件的标签信息。 解析XML实体时的错误，可以被利用来如披露某些本地文件内容，或例如通过特制的使用iXML块的WAV文件用消耗过多的服务器资源。 0 getID3 1.x 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://github.com/JamesHeinrich/getID3/commit/dc8549079a24bb0619b6124ef2df767704f8d0bc...

Vespa 0.8.6 Local File Inclusion

Exploit Title: vespa 0.8.6 Local File Inclusion Date: 05/02/2012 Author: T0x!c Software Link: http://vespa.willinger.cc/ Version: vespa 0.8.6 Tested on: Windows XP ::::::::::::::::::::::::: =================Exploit================= -= vuln c0de =- /vespa/getid3/getid3.php 363 // include module 36...

CVE-2011-3750

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

Information disclosure

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

WordPress Audio 0.5.1 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Audio 0.5.1 Vulnerability...........Reflected Cross-site Scripting Download................http://www.wordpress-plugin.org/tag/audio-0-5-1/ Release Date............1/23/2011 Tested...

getID3 < 1.7.8-b1 Multiple Remote Vulnerabilities

getID3, a web-based tool for extracting information from MP3 files, is installed on the remote web server. The installation of getID3 includes a set of demo scripts that allow an unauthenticated, remote attacker to read and delete arbitrary files, write files with some restrictions, and execute...

Design/Logic Flaw

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...

CVE-2007-1035

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...

CVE-2007-1035

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...

getID3 library and Audio, Mediafield - arbitrary code execution

The getID3 library used by Audio and Mediafield contains a directory with scripts demonstrating use of the library. These scripts allow any visitor to browse the filesystem, read and delete files or write to zero-byte files or files with an mp3 extension. These actions are only limited by the...