Description
Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
References
- downloadtracker-down-xss(24161) vdb-entry
- 22462 vdb-entry
- ADV-2006-0213 vdb-entry
- http://osvdb.org/ref/22/22462-widexl.txt
- 18472 third-party-advisory
- 16265 vdb-entry