CVE:CVE-2010-0963
CNNVD:CNNVD-201003-204
dl Download Ticket Service的脚本index.php存在跨站脚本攻击漏洞。远程攻击者可以借助与一个无效ticket ID相关联的t参数，执行跨站脚本攻击，导致任意web脚本和HTML注入。
solution:Upgrade yuri_d'elia dl to a higher version than 0.6,0.1,0.2,0.3,0.4,0.5,and avoid the version (,0.6],0.1,0.2,0.3,0.4,0.5