Description
Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information.
References
- 38898 third-party-advisory
- 38700 vdb-entry
- http://freshmeat.net/projects/dl-ticket-service
- 62884 vdb-entry
- [dl-ticket-service] 20100311 dl 0.7 released mailing-list