1. Cross-site scripting (reflected)
1.1. http://gigaom.com/2010/06/16/foursquare-vs-gowalla-vs-brightkite/ [REST URL parameter 4]
1.2. http://gigaom.com/collaboration/3-uses-for-crowdsourcing/ [REST URL parameter 2]
Severity: | High |
Confidence: | Certain |
Host: | http://gigaom.com |
Path: | /2010/06/16/foursquare-vs |
GET /2010/06/16/foursquare-vs Host: gigaom.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 404 Not Found Server: nginx Date: Fri, 09 Dec 2011 10:43:18 GMT Content-Type: text/html; charset=UTF-8 Connection: close Vary: Accept-Encoding Vary: Cookie X-hacker: If you're reading this, you should visit automattic.com/jobs and apply to join the fun, mention this header. X-Pingback: http://gigaom.com/xmlrpc Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Fri, 09 Dec 2011 10:43:17 GMT Cache-Control: no-cache, must-revalidate, max-age=60 Pragma: no-cache Content-Length: 91041 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <!-- Timer: [Init] 0.155 | 0.155 --><html xmlns="http://www.w3.org ...[SNIP]... <a href='http://gigaom.com ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://gigaom.com |
Path: | /collaboration/3-uses-for |
GET /collaboration/3-uses-for Host: gigaom.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 404 Not Found Server: nginx Date: Fri, 09 Dec 2011 10:43:13 GMT Content-Type: text/html; charset=UTF-8 Connection: close Vary: Accept-Encoding Vary: Cookie X-hacker: If you're reading this, you should visit automattic.com/jobs and apply to join the fun, mention this header. X-Pingback: http://gigaom.com/xmlrpc Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Fri, 09 Dec 2011 10:43:12 GMT Cache-Control: no-cache, must-revalidate, max-age=60 Pragma: no-cache Content-Length: 89887 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <!-- Timer: [Init] 0.154 | 0.154 --><html xmlns="http://www.w3.org ...[SNIP]... <a href='http://gigaom.com ...[SNIP]... |