EIP-2026-106438

PRE-CVE

Diesel Job Site 1.4 - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106438. PoCs published by indoushka.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Diesel Job Site 1.4, including XSS, RFI, and admin bypass. It provides specific URLs and payloads to exploit these vulnerabilities.

Description

Diesel Job Site 1.4 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by indoushka · textwebappsphp

https://www.exploit-db.com/exploits/10805

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in Diesel Job Site 1.4, including XSS, RFI, and admin bypass. It provides specific URLs and payloads to exploit these vulnerabilities.

Classification

Working Poc 90%

Attack Type

Xss | Rfi | Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Diesel Job Site 1.4

No auth needed

Prerequisites: Access to the target server

MITRE ATT&CK

T1059 - Command and Scripting Interpreter T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026