Dieselscripts: >> Diesel Job Site Security Vulnerabilities
SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id parameter.
CVSS Score
7.5
EPSS Score
0.001
Published
2009-03-13
Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the (1) uname or (2) SEmail parameters.
CVSS Score
4.3
EPSS Score
0.005
Published
2006-08-27
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
CVSS Score
5.0
EPSS Score
0.004
Published
2006-05-23