ScanAlert - Report - Thane

city=80000002
state=80000002
zip=80000002
areacode=x';
prefix=`80
last4=0
email=80000002
sex=A
sex=B
married=A
married=B
Post
purchased=A
purchased=B
purchased=C
purchased=D
purchased=E
dobmonth=0
dobday=0
dobyear=0
education=4319f684-0c89-4edc-9d8a-c56752eb905f
goal=4319f684-0c89-4edc-9d8a-c56752eb905f
equip1=A
equip2=A
equip3=A
equip4=A
equip5=A
equip6=A
people=4319f684-0c89-4edc-9d8a-c56752eb905f
room=4319f684-0c89-4edc-9d8a-c56752eb905f
enter=SUBMIT
reset=CLEAR
Headers Content-Type=application%2Fx-www-form-urlencoded
Links
Top sites vulnerable to hackers
The Cross Site Scripting FAQ
An Oldie but Goodie: The Cross-Site Scripting Vulnerability
www.cgisecurity.com/articles/xss-faq.shtml
www.developer.com/lang/article.php/947041
www.vnunet.com/vnunet/news/2116667/top-sites-vulnerable-hackers
Apache: Cross Site Scripting Info
Apache: ???
The Cross-Site Scripting Vulnerability
Top sites vulnerable to hackers
Related
CERT CA-2000-02
Directory Scanner
Port First Detected Category
80 22-OCT-2006 00:29 Web Application
Protocol Fix Difficulty Impact
HTTP Medium Information Disclosure
Description
During an audit common directories are looked for. This may result in non public Web pages being found.
Solution
Make sure that these directories are intented for the public.
Result
Method GET Protocol http Port 80 Demo
Path /images/
Links
None
Related
None
Directory Scanner
Port First Detected Category
443 22-OCT-2006 00:29 Web Application
Confidential - ScanAlert Security Audit Report
Page 13