Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Download_tracker | Widexl | 1.0.6 (including) | 1.0.6 (including) |