Launchpad.net

CVE 2013-2738

minidlna has SQL Injection that may allow retrieval of arbitrary files

See the CVE page on Mitre.org for more details.