Sign in Get started

← All advisories

Unrated severityNVD Advisory· Published Jan 12, 2013· Updated Apr 29, 2026

CVE-2011-5253

CVE-2011-5253

Description

Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header.

Affected products

7

Thegr/Dl7 versions
cpe:2.3:a:thegr:dl:0.3:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:thegr:dl:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:thegr:dl:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:thegr:dl:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:thegr:dl:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:thegr:dl:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:thegr:dl:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:thegr:dl:0.9:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

secunia.com/advisories/47466nvdVendor Advisory
www.securityfocus.com/bid/51347nvd
www.thregr.org/~wavexx/software/dl/NEWS.htmlnvd
exchange.xforce.ibmcloud.com/vulnerabilities/72252nvd

News mentions

0

No linked articles in our index yet.