2. Cookie without HttpOnly flag set
Severity: | High |
Confidence: | Certain |
Host: | http://live.activeco |
Path: | /webtracker/track2.html |
GET /webtracker/track2.html Host: live.activeconversion.com Proxy-Connection: keep-alive Referer: http://www.pre1.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16 Accept: */* Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Date: Wed, 16 Mar 2011 17:37:33 GMT Server: Apache Pragma: no-cache Cache-Control: no-store, no-cache, max-age=0, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: JSESSIONID=FC22673F5 Set-Cookie: _wt_30792="1300297063914|27131 7e058c1d44e|0"; Max-Age=630720000;Path=/; HttpOnly P3P: policyref="http://www Connection: close Content-Type: image/png Content-Length: 68 .PNG . ...IHDR.................... |
Severity: | Low |
Confidence: | Firm |
Host: | http://live.activeco |
Path: | /webtracker/track2.html |
GET /webtracker/track2.html Host: live.activeconversion.com Proxy-Connection: keep-alive Referer: http://www.pre1.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16 Accept: */* Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Date: Wed, 16 Mar 2011 17:35:23 GMT Server: Apache Pragma: no-cache Cache-Control: no-store, no-cache, max-age=0, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: JSESSIONID=A867B68EC Set-Cookie: _wt_30792=1300296923494 P3P: policyref="http://www Connection: close Content-Type: image/png Content-Length: 68 .PNG . ...IHDR.................... |