CVE-2006-4361

Vulnerability detail (CVE-2006-4361): Diesel Job Site’s jobseekers/forgot.php suffers multiple XSS flaws that let remote attackers inject arbitrary web script/HTML via the (1) uname or (2) SEmail parameters. Affected: Diesel Job Site, file: jobseekers/forgot.php. Impact and remediation are not pr...

CVE-2008-6467

CVE-2008-6467 describes a SQL injection vulnerability in Diesel Job Site, specifically in the file jobs/jobseekers/job-info.php, exploitable via the job_id parameter. The issue could allow remote attackers to execute arbitrary SQL commands. The public record notes this vulnerability with a High b...

CVE-2006-2540

The CVE-2006-2540 issue affects a Diesel PHP Job Site component (install.php) in which sensitive data (user credentials) is sent to an email address controlled by the product developers, causing a privacy leak. The published description identifies a leakage of credentials and other sensitive info...