medium4.3
CVE-2011-5253
Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header.
Impact
Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thegr | Dl | Versions 0.3, 0.4, 0.5, 0.6, 0.7, 0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/47466
- http://www.securityfocus.com/bid/51347
- http://www.thregr.org/~wavexx/software/dl/NEWS.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72252
- http://secunia.com/advisories/47466
- http://www.securityfocus.com/bid/51347
- http://www.thregr.org/~wavexx/software/dl/NEWS.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72252