Dieselscripts

9 CVEs across 5 Dieselscripts products. Browse Dieselscripts vulnerabilities, severities, and proof-of-concept exploits.

Dieselscripts products with known CVEs

ProductCVEs
Diesel Job Site3
Diesel Joke Site2
Diesel Pay2
Diesel Paid Mail1
Diesel Smart Traffic1
Dieselscripts CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-64682009-03-13SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action.
CVE-2008-64672009-03-13SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id paramet…
CVE-2008-41502008-09-24SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a diffe…
CVE-2006-43622006-08-27Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary web script or HTML via the ps parameter.
CVE-2006-43612006-08-27Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML v…
CVE-2006-43582006-08-27Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter.
CVE-2006-43572006-08-27PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL in the src…
CVE-2006-37632006-07-21SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-25402006-05-23Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product develop…