Unscored CVE-2006-2553 EUVD-2006-2553GHSA-g6w4-h3m2-3qc8

Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script v…

Published May 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script via the dcid parameter to dc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. This issue appears to be independent from a different issue that involves the same vector.

References

25715 vdb-entry
ADV-2006-1928 vdb-entry
20060519 Jemscripts Download Control v1.0 mailing-list
downloadcontrol-dc-xss(26624) vdb-entry
20212 third-party-advisory
943 third-party-advisory
20060523 Jemscripts DownloadControl 1.0 - at least 2 separate issues mailing-list