Dieselscripts - vulnerabilities (CVEs)

9 CVEs in 5 products, 0 in the last 30 days, newest from 2009-03-13.

Products

Newest CVEs of Dieselscripts

CVE-2008-6467 - CVSS 7.5 (high), 2009-03-13: SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id…
CVE-2008-6468 - CVSS 7.5 (high), 2009-03-13: SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action.
CVE-2008-4150 - CVSS 7.5 (high), 2008-09-24: SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a…
CVE-2006-4358 - CVSS 4.3 (medium), 2006-08-27: Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter.
CVE-2006-4362 - CVSS 4.3 (medium), 2006-08-27: Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary web script or HTML via the ps parameter.
CVE-2006-4357 - CVSS 7.5 (high), 2006-08-27: PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2006-4361 - CVSS 4.3 (medium), 2006-08-27: Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML…
CVE-2006-3763 - CVSS 7.5 (high), 2006-07-21: SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-2540 - CVSS 5 (medium), 2006-05-23: Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product…