Vulnerabilities

TI-2008-06157 CVE-2008-6467 · GHSA-4cpj-7jmp-8g84

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows…

LOW 35

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00931 Published 2009-03-13 No fix listed CWE-89

TI-2006-04213 CVE-2006-4361 · GHSA-2gmw-4qv6-96c6

Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the (1) uname or (2) SEmail parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01299 Published 2006-08-25 No fix listed

TI-2006-02471 CVE-2006-2540 · GHSA-w2c2-863m-rvjj

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as…

LOW 25

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01192 Published 2006-05-23 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows…

Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel…

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as…