CVE-2004-2007

CVE-2004-2007 describes a cross-site scripting (XSS) vulnerability in modules.php for NukeJokes 1.7 and 2 Beta. The flaw allows remote attackers to inject arbitrary HTML or web script via (1) the cat parameter in CatView or (2) the jokeid parameter in JokeView. This is a client-side script inject...

CVE-2004-2008

CVE-2004-2008 describes an SQL injection in modules.php of NukeJokes 1.7 and 2 Beta , allowing remote attackers to modify/execute SQL via the jokeid parameter. The vulnerability arises from unsafely incorporated input in the query, enabling data disclosure or modification depending on the backend...