CVE-2010-1111

The CVE-2010-1111 entry concerns multiple XSS vulnerabilities in the Jokes Complete Website. The affected components are the web pages joke.php (parameter: id) and results.php (parameter: searchingred). The underlying issue is cross-site scripting that could allow remote attackers to inject arbit...

CVE-2008-5174

CVE-2008-5174 affects Jokes Complete Website 2.1.3, where a SQL injection in joke.php via the jokeid parameter allows remote attackers to execute arbitrary SQL commands. The NVD entry documents a base score of 7.5 (HIGH) with network attack vector, low complexity, and no authentication required, ...

CVE-2008-6880

The CVE-2008-6880 entry describes a SQL injection vulnerability in EasySiteNetwork’s Free Jokes Website, specifically in the joke.php script. The vulnerability arises from improper handling of the id parameter, allowing remote attackers to execute arbitrary SQL commands. The issue is confirmed in...