CVE-2011-5253 Information

Description

Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header.

Reference

http://secunia.com/advisories/47466 http://www.securityfocus.com/bid/51347 http://www.thregr.org/~wavexx/software/dl/NEWS.html https://exchange.xforce.ibmcloud.com/vulnerabilities/72252