Skip to content
OpenAdvisories

Package · Ubuntu

php-getid3

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    getID3 before 1.9.26 OS Command Injection via Unescaped Filenames

    getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the …