CVE-2010-0963

MEDIO 4.3CVE-2010-0963 · Published 16/03/2010 · updated 16/06/2026

In breve

CVE-2010-0963 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda dl (yuri d'elia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dl yuri_d'elia	`= 0.1= 0.2= 0.3= 0.4= 0.5≤ 0.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information.

References

article.gmane.org/gmane.comp.web.dl-ticket-service.general/33 · Patch
freshmeat.net/projects/dl-ticket-service · Patch
osvdb.org/62884
secunia.com/advisories/38898 · Vendor Advisory
securityfocus.com/bid/38700 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free