Published: 25/03/2010 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to joke.php and the (2) searchingred parameter to results.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
easysitenetwork jokes complete website

source: wwwsecurityfocuscom/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affec ...

source: wwwsecurityfocuscom/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the aff ...

CWE-79 http://www.securityfocus.com/bid/37852 http://www.packetstormsecurity.com/1001-exploits/jokescomplete-xss.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/55761 https://nvd.nist.gov https://www.exploit-db.com/exploits/33545/

CVE-2010-1111

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect