1. Cross-site scripting (reflected)
Severity: | High |
Confidence: | Certain |
Host: | http://ads.lzjl.com |
Path: | /newServing/showAd.php |
GET /newServing/showAd.php Host: ads.lzjl.com Proxy-Connection: keep-alive Referer: http://www.djhungama.com Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.41 Safari/534.7 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Date: Tue, 26 Oct 2010 01:51:10 GMT Server: Apache/2.2.9 (Fedora) X-Powered-By: PHP/5.2.6 Expires: Tue, 26 Oct 2010 02:01:10 GMT Last-Modified: Tue, 26 Oct 2010 01:51:10 GMT Cache-Control: max-age=600 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Vary: Accept-Encoding Connection: close Content-Type: application/x-javascript Content-Length: 1435 document.write("<img src=\"http://www ...[SNIP]... dget_title_link = "http://www.clicksor.com infinityads_pub_host = "publisher.infinityads infinityads_nid=5; infinityads_pid=2860; infinityads_sid=4620; infinityads_banner_adtype infinityads_default infinityads_default infinityads_enable_inter document.write("<iframe src=\"http://ads.clicksor ...[SNIP]... |