See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.peking-pharmacy.com%2Findex.php
Script loaded: -http://www.peking-pharmacy.com/js/pptBox.js vuln.: -http://security.stackexchange.com/questions/52828/js-code-vulnerable
Website software vulnerabilities:
HTTP Server: Apache HTTP Server 2.2.4 (Outdated) (Win32)
Operating System: Windows
PHP Version: 5.2.3 (Outdated)
polonus