9894 matches found
Diesel Job Site forgot.php Cross-Site Scripting
NightWarriorKurdish Hacker nightwarrior-athotmail.com Diesel Job Site forgot.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/jobseekers/forgot.php?uname=XSS&fu=Submit http://www.example.com/Script...
DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities
DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in...
DieselScripts Job Site - 'Forgot.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage these issues to have arbitra...
CVE-2006-4107
SQL injection vulnerability in the Job Search module job.module 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search...
CVE-2006-4107
SQL injection vulnerability in the Job Search module job.module 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search...
CVE-2006-4107
CVE-2006-4107 describes an SQL injection vulnerability in Drupal’s Job Search module (job.module) for version 4.6 prior to revision 1.3.2.1. The vulnerability allows remote attackers to craft a job or resume search that could cause arbitrary SQL execution. The core issue is an injectable input ha...
CVE-2006-4107: Undefined Security Weakness
SQL injection vulnerability in the Job Search module job.module 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search...
DRUPAL-SA-2006-012: Jobsearch module
It is possible for a malicious user to inject SQL while searching for jobs or resumes using the Job Search module. Versions affected Please check the CVS $Id$ field in the file job.module to determine whether the version you are running is vulnerable. All 4.6 versions older than the following are...
CA Integrated Threat Management, eTrust Antivirus, eTrust PestPatrol format string vulnerability
Format string bug in job description field...
CVE-2006-3223
Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...
phpjobboard Authecnical admin byPass
SOFTWARE ========== phpjobboard DESCRIPTION: ============ job board administration bypass, and edit or add to new job. example http://target/phpjobboard or your path/admin.php?menu=job&adminop=job-edit&id=item id ============================================ greets...
Code injection
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
CVE-2006-2540
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
CVE-2006-2540
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
CVE-2006-2540
The CVE-2006-2540 issue affects a Diesel PHP Job Site component (install.php) in which sensitive data (user credentials) is sent to an email address controlled by the product developers, causing a privacy leak. The published description identifies a leakage of credentials and other sensitive info...
CVE-2006-2540: Undefined Security Weakness
Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
CVE-2006-1753
A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2006-1753
A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2006-1753
The CVE-2006-1753 entry concerns the fcheck package, where a cronjob creates a temporary file insecurely, enabling local users to overwrite arbitrary files via a symlink attack. Affected component: fcheck (cronjob). Root cause: insecure handling of a temporary file. Impact: local privilege impact...