Jemscripts Downloadcontrol — known CVE vulnerabilities

Every CVE whose affected-product data names Jemscripts Downloadcontrol, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2006-2552 — CVSS 5.0 (medium): Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks…
• CVE-2006-2553 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script…