← Database

CVE-2010-0963

MEDIUM CVSS: 4.3 Published: 2010-03-16 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information.

Affected Platforms

Yuri D\'Elia Dl

Weakness Type

CWE-79

References