EIP-2026-106439
PRE-CVEDieselPay 1.6 - Cross-Site Scripting / Directory Traversal
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106439. PoCs published by indoushka.
AI-analyzed exploit summary The exploit demonstrates a cross-site scripting (XSS) and directory traversal vulnerability in DieselPay 1.6 by providing example URIs that inject malicious scripts and access sensitive files. The lack of input sanitization allows arbitrary script execution and file disclosure.
Description
DieselPay 1.6 - Cross-Site Scripting / Directory Traversal
Exploits (1)
The exploit demonstrates a cross-site scripting (XSS) and directory traversal vulnerability in DieselPay 1.6 by providing example URIs that inject malicious scripts and access sensitive files. The lack of input sanitization allows arbitrary script execution and file disclosure.