Description
Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the (1) uname or (2) SEmail parameters.
References
- 1453 third-party-advisory
- jobsite-forgot-xss(28494) vdb-entry
- 20060821 Diesel Job Site forgot.php Cross-Site Scripting mailing-list
- 28073 vdb-entry
- 21589 third-party-advisory
- ADV-2006-3345 vdb-entry