1. Cross-site scripting (reflected)
2. Cookie scoped to parent domain
3. Cross-domain Referer leakage
4. Cross-domain script include
5. Cookie without HttpOnly flag set
Severity: | High |
Confidence: | Certain |
Host: | http://landesm.gfi.com |
Path: | /forensic-investigations |
GET /forensic-investigations Host: landesm.gfi.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Fri, 07 Jan 2011 21:21:03 GMT Server: TornadoServer/1.0 Connection: keep-alive Content-Length: 2205 <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Oops (Error 404) - Performable</title> <style type="text/css"> body { font-family:"Lucida Gra ...[SNIP]... <script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-10161796-3']); _gaq.push(['_trackPa (function() { var ga = document.createElement( ga.src = ('https:' == document.location ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://landesm.gfi.com |
Path: | /forensic-investigations |
GET /forensic-investigations Host: landesm.gfi.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 07 Jan 2011 19:02:20 GMT Etag: "8402f26533ee1627af9 Server: TornadoServer/1.0 Set-Cookie: __ptcx=3ct6p5.4YSXTy.1; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Set-Cookie: __pcid=3ct6p5:1; Domain=.gfi.com; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Connection: keep-alive Content-Length: 30077 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <META http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Forensic investigations</title> <meta name= ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://landesm.gfi.com |
Path: | /forensic-investigations |
GET /forensic-investigations Host: landesm.gfi.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 07 Jan 2011 19:02:20 GMT Etag: "8402f26533ee1627af9 Server: TornadoServer/1.0 Set-Cookie: __ptcx=3ct6p5.4YSXTy.1; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Set-Cookie: __pcid=3ct6p5:1; Domain=.gfi.com; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Connection: keep-alive Content-Length: 30077 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <META http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Forensic investigations</title> <meta name= ...[SNIP]... <meta name="keywords" content="event log, event log management, network wide, network events, event logs, intrusion detection" /> <link rel="shortcut icon" type="image/ico" href="http://d1nu2rn <meta name="performable ...[SNIP]... <link rel="stylesheet" type="text/css" href="http://www.gfi.com <script language="JavaScript" type="text/javascript" src="http://cdn ...[SNIP]... <div id="bodyText"><img class="fullAwards" align="right" src="http://cdn ...[SNIP]... <div id="prodLogo"><img src="http://cdn ...[SNIP]... <a href="javascript ...[SNIP]... </script> <script type="text/javascript" src="http://www </script> ...[SNIP]... <div style="display:inline;"> <img height="1" width="1" style="border-style:none; </div> ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://landesm.gfi.com |
Path: | /forensic-investigations |
GET /forensic-investigations Host: landesm.gfi.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 07 Jan 2011 19:02:20 GMT Etag: "8402f26533ee1627af9 Server: TornadoServer/1.0 Set-Cookie: __ptcx=3ct6p5.4YSXTy.1; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Set-Cookie: __pcid=3ct6p5:1; Domain=.gfi.com; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Connection: keep-alive Content-Length: 30077 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <META http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Forensic investigations</title> <meta name= ...[SNIP]... <link rel="stylesheet" type="text/css" href="http://www.gfi.com <script language="JavaScript" type="text/javascript" src="http://cdn ...[SNIP]... </script> <script type="text/javascript" src="http://www </script> ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://landesm.gfi.com |
Path: | /forensic-investigations |
GET /forensic-investigations Host: landesm.gfi.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 07 Jan 2011 19:02:20 GMT Etag: "8402f26533ee1627af9 Server: TornadoServer/1.0 Set-Cookie: __ptcx=3ct6p5.4YSXTy.1; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Set-Cookie: __pcid=3ct6p5:1; Domain=.gfi.com; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Connection: keep-alive Content-Length: 30077 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <META http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Forensic investigations</title> <meta name= ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://landesm.gfi.com |
Path: | /forensic-investigations |
GET /forensic-investigations Host: landesm.gfi.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Fri, 07 Jan 2011 19:02:20 GMT Etag: "8402f26533ee1627af9 Server: TornadoServer/1.0 Set-Cookie: __ptcx=3ct6p5.4YSXTy.1; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Set-Cookie: __pcid=3ct6p5:1; Domain=.gfi.com; expires=Wed, 06 Jul 2011 19:02:20 GMT; Path=/ Connection: keep-alive Content-Length: 30077 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <META http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Forensic investigations</title> <meta name= ...[SNIP]... </b> sales@gfi.com<br> ...[SNIP]... |