Unrated severityNVD Advisory· Published Mar 16, 2010· Updated Jun 16, 2026
CVE-2010-0963
CVE-2010-0963
Description
Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:yuri_d\'elia:dl:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:yuri_d\'elia:dl:*:*:*:*:*:*:*:*range: <=0.6
- cpe:2.3:a:yuri_d\'elia:dl:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:yuri_d\'elia:dl:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:yuri_d\'elia:dl:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:yuri_d\'elia:dl:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:yuri_d\'elia:dl:0.5:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- article.gmane.org/gmane.comp.web.dl-ticket-service.general/33nvdPatch
- freshmeat.net/projects/dl-ticket-servicenvdPatch
- www.securityfocus.com/bid/38700nvdPatch
- secunia.com/advisories/38898nvdVendor Advisory
- osvdb.org/62884nvd
News mentions
0No linked articles in our index yet.