ScanAlert - Report - Thane

More documents

Recommendations

Info

Result None Links BlackIce Admin Guide BlackIce Block ICMP Related CVE CVE-1999-0524 Resolved Items - ashe.fitnessquest.com None Confidential - ScanAlert Security Audit Report Page 10
Overview - www.fitnessquest.com Last Audit Date Urgent Critical High Medium Low Total 29-MAR-2007 15:19 0 0 0 2 3 5 Open Ports - www.fitnessquest.com Port Protocol Service Banner 80 tcp http http 443 tcp https https Vulnerabilities - www.fitnessquest.com Information Disclosures - www.fitnessquest.com WebApp Cross Site Scripting Port First Detected Category 443 27-MAR-2007 11:34 Web Application Protocol Fix Difficulty Impact HTTP Medium Cross Site Scripting (XSS) Description The remote web application appears to be vulnerable to cross site scripting (XSS). The cross-site scripting attack is one of the most common, yet overlooked, security problems facing web developers today. A web site is vulnerable if it displays user-submitted content without checking for malicious script tags. The target of cross-site scripting attacks is not the server itself, but the user files on the server, such as forms and other dynamic content. All a malicious attacker needs to do is find a page that does not properly sanitize user input, but returns the scripting code verbatim to the browser of a visitor to that website. It is important to note that websites that use SSL are just as vulnerable as websites that do not encrypt browser sessions. The damage caused by such an attack can range from stealing session and cookie data from your customers to loading a virus payload onto their computer via browser. The pages listed in the vulnerability output will display embedded javascript with no filtering back to the user. Solution Ensure you turn the > and < into their HTML equivalents before sending it back to the browser. Ensure that parameters and user input are stripped of HTML tags before using. Remove : input = replace( input, ">", "" ) Remove ' : input = replace( input, "'", "" ) Filtering < and > alone will not solve all cross site scripting attacks and it is suggested you also attempt to filter out ( and ) by translating them to their encoded equivalents. Result Method POST Protocol https Port 443 Demo Path /scripts/cgiip.exe/WService=fq/warranty.html product=4319f684-0c89-4edc-9d8a-c56752eb905f serial= packageid=4319f684-0c89-4edc-9d8a-c56752eb905f amonth=4319f684-0c89-4edc-9d8a-c56752eb905f aday=4319f684-0c89-4edc-9d8a-c56752eb905f ayear=4319f684-0c89-4edc-9d8a-c56752eb905f firstname=4319f684-0c89-4edc-9d8a-c56752eb905f lastname=4319f684-0c89-4edc-9d8a-c56752eb905f address=4319f684-0c89-4edc-9d8a-c56752eb905f city=4319f684-0c89-4edc-9d8a-c56752eb905f state=4319f684-0c89-4edc-9d8a-c56752eb905f zip=4319f684-0c89-4edc-9d8a-c56752eb905f areacode=4319f684-0c89-4edc-9d8a-c56752eb905f prefix=4319f684-0c89-4edc-9d8a-c56752eb905f last4=4319f684-0c89-4edc-9d8a-c56752eb905f email=4319f684-0c89-4edc-9d8a-c56752eb905f sex=A sex=B married=A married=B Post purchased=A Confidential - ScanAlert Security Audit Report Page 11
Page 1 and 2: Security Report - By Device Fitness
Page 3 and 4: Report Overview Customer Name Fitne
Page 5 and 6: Device Overview Name Urgent Critica
Page 7 and 8: Overview - 63.109.13.3 Last Audit D
Page 9: Overview - ashe.fitnessquest.com La
Page 13 and 14: city=80000002 state=80000002 zip=80
Page 15: Vulnerability Levels Severity Level

ScanAlert - Report - Thane

Create successful ePaper yourself

Delete template?

Save as template?