52032vdb entry
http://osvdb.org/52032 CVE-2008-6880
Easysitenetwork Jokes Complete Website - 'joke.php' SQL Injection
Record summary
CVE-2008-6880 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitrary SQL commands via the id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBEasysitenetwork Jokes Complete Website - 'joke.php' SQL InjectionExploitDB exploitby Ehsan_Hp200Not analyzed1 file
References
520081218 EasySiteNetwork (joke.php?id) Remote SQL injection Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/499351/100/0/threaded 32908vdb entry
http://www.securityfocus.com/bid/32908 freejokeswebsite-jokes-sql-injection(47468)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47468 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-6880