CVE-2010-1111
Jokes Complete Website - Cross-Site Scripting via id Parameter or searchingred Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1111. PoCs published by indoushka.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in EasySiteNetwork Jokes Complete Website by injecting malicious JavaScript via the 'searchingred' parameter in results.php. The PoC uses an img tag with an onload event to trigger an alert dialog, proving arbitrary script execution.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to joke.php and the (2) searchingred parameter to results.php.
Exploits (2)
This exploit demonstrates a reflected XSS vulnerability in EasySiteNetwork Jokes Complete Website by injecting malicious JavaScript via the 'searchingred' parameter in results.php. The PoC uses an img tag with an onload event to trigger an alert dialog, proving arbitrary script execution.
This exploit demonstrates a reflected XSS vulnerability in EasySiteNetwork Jokes Complete Website by injecting malicious script code via the 'id' parameter in the URL. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.