1. Cross-site scripting (reflected)
1.1. https://secure.vermont.gov/portal/index.php [name of an arbitrarily supplied request parameter]
1.2. https://secure.vermont.gov/myvermont/ [Referer HTTP header]
1.3. https://secure.vermont.gov/myvermont/index.php [Referer HTTP header]
1.4. https://secure.vermont.gov/myvermont/myvermont.php [Referer HTTP header]
2. SSL cookie without secure flag set
2.1. https://secure.vermont.gov/ACCD/eventreg/
2.2. https://secure.vermont.gov/AOT/eventreg/
2.3. https://secure.vermont.gov/bizfile/index
2.4. https://secure.vermont.gov/dmv/express
2.5. https://secure.vermont.gov/hd/index
2.6. https://secure.vermont.gov/vtcdas/user
2.7. https://secure.vermont.gov/vtpay/user
4. Cookie without HttpOnly flag set
4.1. https://secure.vermont.gov/ACCD/eventreg/
4.2. https://secure.vermont.gov/AOT/eventreg/
4.3. https://secure.vermont.gov/bizfile/index
4.4. https://secure.vermont.gov/dmv/express
4.5. https://secure.vermont.gov/hd/index
4.6. https://secure.vermont.gov/vtcdas/user
4.7. https://secure.vermont.gov/vtpay/user
5. Password field with autocomplete enabled
5.1. https://secure.vermont.gov/TAX/refund/
5.2. https://secure.vermont.gov/bizfile/index
5.3. https://secure.vermont.gov/myvermont/
5.4. https://secure.vermont.gov/myvermont/index.php
5.5. https://secure.vermont.gov/myvermont/signup.php
7. Cross-domain script include
7.1. https://secure.vermont.gov/myvermont/signup.php
7.2. https://secure.vermont.gov/portal/search.php
8.1. https://secure.vermont.gov/ACCD/eventreg/
8.2. https://secure.vermont.gov/bizfile/index
8.3. https://secure.vermont.gov/myvermont/signup.php
8.4. https://secure.vermont.gov/portal/rss/feeds/news.php
9.1. https://secure.vermont.gov/DMV/reinstatement/
9.2. https://secure.vermont.gov/DPS/publicrecords/
9.3. https://secure.vermont.gov/TAX/refund/
9.4. https://secure.vermont.gov/dmv/express
9.5. https://secure.vermont.gov/myvermont/
9.6. https://secure.vermont.gov/myvermont/index.php
9.7. https://secure.vermont.gov/myvermont/problem.php
9.8. https://secure.vermont.gov/myvermont/signup.php
9.9. https://secure.vermont.gov/portal/index.php
9.10. https://secure.vermont.gov/portal/rotator.php
9.11. https://secure.vermont.gov/portal/rss/feeds/news.php
9.12. https://secure.vermont.gov/portal/search.php
9.13. https://secure.vermont.gov/vtcdas/user
9.14. https://secure.vermont.gov/vtpay/user
10. HTML does not specify charset
10.1. https://secure.vermont.gov/dmv/express
10.2. https://secure.vermont.gov/portal/rotator.php
10.3. https://secure.vermont.gov/vtcdas/user
10.4. https://secure.vermont.gov/vtpay/user
Severity: | High |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/index.php |
GET /portal/index.php/6e954"><script>alert(1)< Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:17:34 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 29165 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov </title> <meta name="verify-v1" content="3S ...[SNIP]... <form method="post" action="/portal/index.php ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/ |
GET /myvermont/ HTTP/1.1 Host: secure.vermont.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=211816467 Referer: http://www.google.com |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:11:12 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html Content-Length: 15079 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... <input type='hidden' name='refer' value='http://www.google ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/index.php |
GET /myvermont/index.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Referer: http://www.google.com |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:17:48 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 15160 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... <input type='hidden' name='refer' value='http://www.google ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/myvermont.php |
GET /myvermont/myvermont.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Referer: http://www.google.com |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:17:19 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 15160 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... <input type='hidden' name='refer' value='http://www.google ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /ACCD/eventreg/ |
GET /ACCD/eventreg/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:47 GMT Server: Apache Set-Cookie: PHPSESSID=jf95n0fqvv Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Length: 3426 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Agency of Commerce and Community Development ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /AOT/eventreg/ |
GET /AOT/eventreg/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:50 GMT Server: Apache Set-Cookie: PHPSESSID=ncc2sb1qjn Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Length: 2509 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Agency of Transportation Event Registration</ ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /bizfile/index |
GET /bizfile/index HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:23 GMT Server: Apache Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Content-Length: 7010 Set-Cookie: JSESSIONID=aBDgovPG6Qm_; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>Vermont Tax BizFile</title> <meta http-equiv="Content-Type" content="tex ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /dmv/express |
GET /dmv/express HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:11 GMT Server: Apache Cache-Control: private Content-Length: 5507 Set-Cookie: JSESSIONID=cIZ9ANgvlFg4; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title>DMV Express - Vermont DMV's One Stop for All Your DMV Needs</title> <META NAME="Keywords" CONTENT="Vermont, State, ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /hd/index |
GET /hd/index HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:27 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache Cache-Control: no-store Set-Cookie: JSESSIONID=acfADCOYu6wa; path=/ Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 38015 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-2" > ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /vtcdas/user |
GET /vtcdas/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:25 GMT Server: Apache Cache-Control: private Content-Length: 6707 Set-Cookie: JSESSIONID=cahlWpUnC2xh; path=/ Connection: close Content-Type: text/html <HTML><HEAD><TITLE>VT Courts Online</TITLE> <META content="VT Courts Online provides online access to court summary information for civil and criminal court cases in Vermont" name=description> <META c ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /vtpay/user |
GET /vtpay/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:29 GMT Server: Apache Cache-Control: private Content-Length: 6573 Set-Cookie: JSESSIONID=cLJAdn4BT3y-; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html><!-- #BeginTemplate "/Templates/standard.dwt" --> <head> <!-- #BeginEditable "doctitle" --> <title>VT Pay - Pay Your Taxes Online ...[SNIP]... |
Severity: | Medium |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /vtcdas/user |
GET /vtcdas/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:25 GMT Server: Apache Cache-Control: private Content-Length: 6707 Set-Cookie: JSESSIONID=cahlWpUnC2xh; path=/ Connection: close Content-Type: text/html <HTML><HEAD><TITLE>VT Courts Online</TITLE> <META content="VT Courts Online provides online access to court summary information for civil and criminal court cases in Vermont" name=description> <META c ...[SNIP]... <li id="nav-login"><a href="/vtcdas/user <li id="nav-cal"><a href="/vtcdas/user ...[SNIP]... <li id="nav-acctcreate"><a href="/vtcdas/user ...[SNIP]... <li id="nav-faq"><a href="/vtcdas/user ...[SNIP]... <LI id="nav-judiciary"><A href="/vtcdas/user ...[SNIP]... <LI id="nav-feedback"><A href="/vtcdas/user ...[SNIP]... formation when and if that information is not confidential. It is not necessary to sign up for an account to view the calendar information. If you are looking for the Public Calendar, please click the <a href="/vtcdas/user 'Calendar by Date and County'</a> ...[SNIP]... <td colspan="2"><a href="/vtcdas/user ...[SNIP]... <td colspan="2"><a href="/vtcdas/user ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /ACCD/eventreg/ |
GET /ACCD/eventreg/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:47 GMT Server: Apache Set-Cookie: PHPSESSID=jf95n0fqvv Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Length: 3426 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Agency of Commerce and Community Development ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /AOT/eventreg/ |
GET /AOT/eventreg/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:50 GMT Server: Apache Set-Cookie: PHPSESSID=ncc2sb1qjn Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Length: 2509 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Agency of Transportation Event Registration</ ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /bizfile/index |
GET /bizfile/index HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:23 GMT Server: Apache Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Content-Length: 7010 Set-Cookie: JSESSIONID=aBDgovPG6Qm_; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>Vermont Tax BizFile</title> <meta http-equiv="Content-Type" content="tex ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /dmv/express |
GET /dmv/express HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:11 GMT Server: Apache Cache-Control: private Content-Length: 5507 Set-Cookie: JSESSIONID=cIZ9ANgvlFg4; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title>DMV Express - Vermont DMV's One Stop for All Your DMV Needs</title> <META NAME="Keywords" CONTENT="Vermont, State, ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /hd/index |
GET /hd/index HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:27 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache Cache-Control: no-store Set-Cookie: JSESSIONID=acfADCOYu6wa; path=/ Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 38015 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-2" > ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /vtcdas/user |
GET /vtcdas/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:25 GMT Server: Apache Cache-Control: private Content-Length: 6707 Set-Cookie: JSESSIONID=cahlWpUnC2xh; path=/ Connection: close Content-Type: text/html <HTML><HEAD><TITLE>VT Courts Online</TITLE> <META content="VT Courts Online provides online access to court summary information for civil and criminal court cases in Vermont" name=description> <META c ...[SNIP]... |
Severity: | Low |
Confidence: | Firm |
Host: | https://secure.vermont |
Path: | /vtpay/user |
GET /vtpay/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:29 GMT Server: Apache Cache-Control: private Content-Length: 6573 Set-Cookie: JSESSIONID=cLJAdn4BT3y-; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html><!-- #BeginTemplate "/Templates/standard.dwt" --> <head> <!-- #BeginEditable "doctitle" --> <title>VT Pay - Pay Your Taxes Online ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /TAX/refund/ |
GET /TAX/refund/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:44 GMT Server: Apache Content-Length: 5714 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Tax Refund Status</title> <meta http-equiv= ...[SNIP]... </h2> <form name='info' method='post' action='https://secure <table cellpadding=1 cellspacing=1 border=0 width="95%" align="center"> ...[SNIP]... <td> <input type='password' name='SSN1' size='3' maxlength='3' value='' onKeyUp="keyUp(this)" /> - <input type='password' name='SSN2' size='2' maxlength='2' value='' onKeyUp="keyUp(this)" /> - <input type='text' name='SSN3' size='4' maxlength='4' value='' autocomplete="off" /> ...[SNIP]... <td> <input type='password' name='confSSN1' size='3' maxlength='3' value='' onKeyUp="keyUp(this)" /> - <input type='password' name='confSSN2' size='2' maxlength='2' value='' onKeyUp="keyUp(this)" /> - <input type='text' name='confSSN3' size='4' maxlength='4' value='' autocomplete="off" /> ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /bizfile/index |
GET /bizfile/index HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:23 GMT Server: Apache Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Content-Length: 7010 Set-Cookie: JSESSIONID=aBDgovPG6Qm_; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>Vermont Tax BizFile</title> <meta http-equiv="Content-Type" content="tex ...[SNIP]... <div class="boxContent"> <form method="post" action="/bizfile/index <input type="hidden" name="page" value="login"> ...[SNIP]... <td><input type='password' name='login_password' id='login_password' size='20' maxlength='20' value="" /> (Reminder: Passwords are case sensitive.) </td> ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/ |
GET /myvermont/ HTTP/1.1 Host: secure.vermont.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=211816467 |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:10:15 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html Content-Length: 15023 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... </p> <form method='post' action='/myvermont/index <input type='hidden' name='refer' value='/myvermont ...[SNIP]... <td><input type='password' name='myvt_passwd' size='25' maxlength='45' /></td> ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/index.php |
GET /myvermont/index.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:35 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 15104 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... </p> <form method='post' action='/myvermont/index <input type='hidden' name='refer' value='/myvermont ...[SNIP]... <td><input type='password' name='myvt_passwd' size='25' maxlength='45' /></td> ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/signup.php |
GET /myvermont/signup.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:32 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 18675 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... </p> <form method='post' action='/myvermont/signup <p class='content'> ...[SNIP]... <td class='content' width='40%'> <input type='password' id='passwd' name='passwd' value='' size='35' maxlength='50' onkeyup="testPassword <br /> ...[SNIP]... <td colspan=2 class='content'><input type='password' name='passwd2' value='' size='35' maxlength='50' /></td> ...[SNIP]... |
Severity: | Low |
Confidence: | Tentative |
Host: | https://secure.vermont |
Path: | /styles/portal_text.css |
GET /styles/portal_text.css HTTP/1.1 Host: secure.vermont.gov Connection: keep-alive Referer: https://secure.vermont User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16 Accept: text/css,*/*;q=0.1 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=211816467 |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:10:20 GMT Server: Apache Last-Modified: Sat, 25 Sep 2010 23:50:48 GMT ETag: "a1a-443f-2a166600" Accept-Ranges: bytes Content-Length: 17471 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/css html,body { margin:0; padding:0; text-align:center; font:100%/120% Arial, Verdana, sans-serif; background:#fff; } img { display:none; } #pageContainer { width:995px; margin:auto; text-align:left; } a ...[SNIP]... 9; text-align:right; font-size:12px; padding:4px 30px 2px 0; margin:3px 3px 0 0; background:#eee url(/images/applications ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/signup.php |
GET /myvermont/signup.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:32 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 18675 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... <td colspan=2> <script type="text/javascript" src="https://api-secure ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/search.php |
GET /portal/search.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:42 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 13376 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head profile='http://www.w3 <title>Vermont.gov ...[SNIP]... </div> <script src="http://www.google ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /ACCD/eventreg/ |
GET /ACCD/eventreg/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:47 GMT Server: Apache Set-Cookie: PHPSESSID=jf95n0fqvv Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Length: 3426 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Agency of Commerce and Community Development ...[SNIP]... <a href='mailto:sayaire@yahoo.com'> ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /bizfile/index |
GET /bizfile/index HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:23 GMT Server: Apache Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Content-Length: 7010 Set-Cookie: JSESSIONID=aBDgovPG6Qm_; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>Vermont Tax BizFile</title> <meta http-equiv="Content-Type" content="tex ...[SNIP]... <a href='mailto:bustax@state.vt.us'>bustax@state.vt.us</a> ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/signup.php |
GET /myvermont/signup.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:32 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 18675 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... <b>portal-support@vermont ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/rss/feeds/news |
GET /portal/rss/feeds/news Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:37 GMT Server: Apache Connection: close Content-Type: application/rss+xml Content-Length: 11044 <?xml version="1.0" encoding="UTF-8" ?> <rss version="2.0"> <channel> <title>Vermont.gov News and Press Releases</title> <link>http://www.vermont <description>News and Press Releas ...[SNIP]... <managingEditor>portal-feedback@vermont <webMaster>portal-feedback@vermont ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /DMV/reinstatement/ |
GET /DMV/reinstatement/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:13 GMT Server: Apache Connection: close Content-Type: text/html Content-Length: 13599 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont DMV Driver's License Reinstatement Service</t ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /DPS/publicrecords/ |
GET /DPS/publicrecords/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:21 GMT Server: Apache Content-Length: 7655 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Department of Public Safety Police Reports Re ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /TAX/refund/ |
GET /TAX/refund/ HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:44 GMT Server: Apache Content-Length: 5714 Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont Tax Refund Status</title> <meta http-equiv= ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /dmv/express |
GET /dmv/express HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:11 GMT Server: Apache Cache-Control: private Content-Length: 5507 Set-Cookie: JSESSIONID=cIZ9ANgvlFg4; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title>DMV Express - Vermont DMV's One Stop for All Your DMV Needs</title> <META NAME="Keywords" CONTENT="Vermont, State, ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/ |
GET /myvermont/ HTTP/1.1 Host: secure.vermont.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=211816467 |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:10:15 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html Content-Length: 15023 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/index.php |
GET /myvermont/index.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:35 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 15104 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/problem.php |
GET /myvermont/problem.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:33 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 14392 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /myvermont/signup.php |
GET /myvermont/signup.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:32 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 18675 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov - myVermont.gov Accounts</title> <meta nam ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/index.php |
GET /portal/index.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:39 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 28712 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head> <title>Vermont.gov </title> <meta name="verify-v1" content="3S ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/rotator.php |
GET /portal/rotator.php Host: secure.vermont.gov Connection: keep-alive Referer: https://secure.vermont User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16 Accept: */* Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=211816467 |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:20:11 GMT Server: Apache Content-Length: 1602 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html <div class="contentdiv" onclick="location.href= ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/rss/feeds/news |
GET /portal/rss/feeds/news Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:37 GMT Server: Apache Connection: close Content-Type: application/rss+xml Content-Length: 11044 <?xml version="1.0" encoding="UTF-8" ?> <rss version="2.0"> <channel> <title>Vermont.gov News and Press Releases</title> <link>http://www.vermont <description>News and Press Releas ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/search.php |
GET /portal/search.php HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:42 GMT Server: Apache p3p: CP="ALL DSP COR ADM TAIi CONi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA GOV", policyref="/w3c/p3p.xml" Connection: close Content-Type: text/html X-Pad: avoid browser bug Content-Length: 13376 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html xmlns="http://www.w3.org <head profile='http://www.w3 <title>Vermont.gov ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /vtcdas/user |
GET /vtcdas/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:25 GMT Server: Apache Cache-Control: private Content-Length: 6707 Set-Cookie: JSESSIONID=cahlWpUnC2xh; path=/ Connection: close Content-Type: text/html <HTML><HEAD><TITLE>VT Courts Online</TITLE> <META content="VT Courts Online provides online access to court summary information for civil and criminal court cases in Vermont" name=description> <META c ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /vtpay/user |
GET /vtpay/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:29 GMT Server: Apache Cache-Control: private Content-Length: 6573 Set-Cookie: JSESSIONID=cLJAdn4BT3y-; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html><!-- #BeginTemplate "/Templates/standard.dwt" --> <head> <!-- #BeginEditable "doctitle" --> <title>VT Pay - Pay Your Taxes Online ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /dmv/express |
GET /dmv/express HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:11 GMT Server: Apache Cache-Control: private Content-Length: 5507 Set-Cookie: JSESSIONID=cIZ9ANgvlFg4; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title>DMV Express - Vermont DMV's One Stop for All Your DMV Needs</title> <META NAME="Keywords" CONTENT="Vermont, State, ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /portal/rotator.php |
GET /portal/rotator.php Host: secure.vermont.gov Connection: keep-alive Referer: https://secure.vermont User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16 Accept: */* Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=211816467 |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:20:11 GMT Server: Apache Content-Length: 1602 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html <div class="contentdiv" onclick="location.href= ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /vtcdas/user |
GET /vtcdas/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:25 GMT Server: Apache Cache-Control: private Content-Length: 6707 Set-Cookie: JSESSIONID=cahlWpUnC2xh; path=/ Connection: close Content-Type: text/html <HTML><HEAD><TITLE>VT Courts Online</TITLE> <META content="VT Courts Online provides online access to court summary information for civil and criminal court cases in Vermont" name=description> <META c ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | https://secure.vermont |
Path: | /vtpay/user |
GET /vtpay/user HTTP/1.1 Host: secure.vermont.gov Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Fri, 29 Apr 2011 20:16:29 GMT Server: Apache Cache-Control: private Content-Length: 6573 Set-Cookie: JSESSIONID=cLJAdn4BT3y-; path=/ Connection: close Content-Type: text/html <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html><!-- #BeginTemplate "/Templates/standard.dwt" --> <head> <!-- #BeginEditable "doctitle" --> <title>VT Pay - Pay Your Taxes Online ...[SNIP]... |