1. Cross-site scripting (reflected)
1.2. http://help.outlook.com/en-us/140/relatedtopicsearch [xss parameter]
Severity: | High |
Confidence: | Certain |
Host: | http://help.outlook.com |
Path: | /en-us/140/relatedto |
GET /en-us/140/relatedto Host: help.outlook.com Proxy-Connection: keep-alive X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.121 Safari/535.2 Accept: text/html, */* Referer: http://help.outlook.com Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: MC0=1323001760149; ehcLightBrowser=0; WT_NVR=0=/:1=en-us:2=en |
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 Set-Cookie: A=I&I=AxUFAAAAAAArCQ X-AspNetMvc-Version: 3.0 X-AspNet-Version: 4.0.30319 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Sun, 04 Dec 2011 12:35:49 GMT Content-Length: 1913 <ul><li><a href="http://help.outlook ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://help.outlook.com |
Path: | /en-us/140/relatedto |
GET /en-us/140/relatedto Host: help.outlook.com Proxy-Connection: keep-alive X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.121 Safari/535.2 Accept: text/html, */* Referer: http://help.outlook.com Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: ehcLightBrowser=0; TocHashCookie=cc745982(n) |
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 Set-Cookie: A=I&I=AxUFAAAAAABmBw X-AspNetMvc-Version: 3.0 X-AspNet-Version: 4.0.30319 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Sun, 04 Dec 2011 12:35:51 GMT Content-Length: 2095 <ul><li><a href="http://help.outlook ...[SNIP]... |