Jemscripts Downloadcontrol vulnerabilities
2 known vulnerabilities affecting jemscripts/downloadcontrol.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2006-2552P4MEDIUMCVSS 5.0PoCv1.02006-05-24
CVE-2006-2552 [MEDIUM] CVE-2006-2552: Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invali
Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an error message. NOTE: this was originally claimed to be SQL injection, but it is probably resultant from another issue in functions.php.
nvd
CVE-2006-2553P4MEDIUMCVSS 4.3v1.02006-05-24
CVE-2006-2553 [MEDIUM] CVE-2006-2553: Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers t
Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script via the dcid parameter to dc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. This issue appears to be independent from a different issue that involves
nvd