1. Cross-site scripting (stored)
1.1. http://learn.shavlik.com/shavlik/ [h parameter]
1.2. http://learn.shavlik.com/shavlik/index.cfm [h parameter]
2. Cross-site scripting (reflected)
3. Cleartext submission of password
4. Cookie without HttpOnly flag set
5. Password field with autocomplete enabled
6. Cross-domain Referer leakage
7. Cross-domain script include
7.1. http://learn.shavlik.com/
7.2. http://learn.shavlik.com/about-oppsource
7.3. http://learn.shavlik.com/blog
7.4. http://learn.shavlik.com/careers
7.5. http://learn.shavlik.com/contact-us
7.6. http://learn.shavlik.com/content-marketing
7.7. http://learn.shavlik.com/customer-login
7.8. http://learn.shavlik.com/customers
7.9. http://learn.shavlik.com/lead-capture
7.10. http://learn.shavlik.com/lead-funnel-measurement
7.11. http://learn.shavlik.com/lead-management
7.12. http://learn.shavlik.com/lead-nurturing
7.13. http://learn.shavlik.com/lead-scoring
7.14. http://learn.shavlik.com/leadership
7.15. http://learn.shavlik.com/opportunity-handoff
7.16. http://learn.shavlik.com/services
7.17. http://learn.shavlik.com/shavlik/mail-list-patch-management-org.aspx
7.18. http://learn.shavlik.com/shavlik/mail-list-remediator.aspx
7.19. http://learn.shavlik.com/shavlik/mail-list-shavlik-announce.aspx
7.20. http://learn.shavlik.com/shavlik/mail-list-shavlik-xml.aspx
8.1. http://learn.shavlik.com/careers
8.2. http://learn.shavlik.com/contact-us
8.3. http://learn.shavlik.com/shavlik/
8.4. http://learn.shavlik.com/shavlik/download.cfm
8.5. http://learn.shavlik.com/shavlik/index.cfm
9. Content type incorrectly stated
Severity: | High |
Confidence: | Certain |
Host: | http://learn.shavlik.com |
Path: | /shavlik/ |
GET /shavlik/index.cfm?m=1009 Host: learn.shavlik.com Proxy-Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: CFID=610666; CFTOKEN=95679479 |
GET /shavlik/ HTTP/1.1 Host: learn.shavlik.com Proxy-Connection: keep-alive Referer: http://learn.shavlik.com/ User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: CFID=610666; CFTOKEN=95679479 |
HTTP/1.1 200 OK Connection: close Date: Mon, 21 Mar 2011 15:41:44 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Type: text/html; charset=UTF-8 <!-- caught error --> <!-- 02edf0--><script>alert(1)< <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <html xmlns="http://www.w3.org <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <title>Shavlik</title> <link rel="stylesheet" href="style/style.css" type="text/css" media="all" /> <!--[if IE 6]> <style> #navitem a {padding-bottom:0px;} </style> <![endif]--> <script language="javascript" type="text/javascript"> function windowOpen(sURL, bFade, sWindowName) { if (bFade) { document.getElementById( } sWindowName = sWindowName || "newWindow"; nPosX = (window.screen.width/2) - (400); nPosY = (window.screen.height/2) - (350 + 75); newWindow = window.open(sURL newWindow.focus(); } var req; function docLoad(url) { req = false; // non IE if(window.XMLHttpRequest && !(window.ActiveXObject)) { try { req = new XMLHttpRequest(); } catch(e) { req = false; } // IE } else if(window.ActiveXObject) { try { req = new ActiveXObject("Msxml2 } catch(e) { try { req = new ActiveXObject("Microsoft } catch(e) { req = false; } } } if(req) { //req.onreadystatechange = processReqChange; req.open("GET", url, false); req.send(""); } //req = false; } function downloadRecord(fileID) { sURL = "download.cfm?nFileID=" + fileID + "&a=1"; docLoad(sURL); } </script> <link rel="stylesheet" type="text/css" href="shadowbox/shadowbox <script type="text/javascript" src="shadowbox/shadowbox <script type="text/javascript"> function userCheck(sURL,nID) { docLoad('userCheck.cfm'); if (req.responseText == 'num0') { Shadowbox.open({ content: 'download.cfm?nFileID=0&a player: "iframe" }); return true; } else if (sURL.search('.wmv') != -1) { Shadowbox.open({ content: sURL, player: "html", width: 700, height: 570 }); downloadRecord(nID); return true; } else { Shadowbox.open({ content: sURL, player: "flv", width: 640, height: 364 }); downloadRecord(nID); return true; } } Shadowbox.init({ modal: true }); </script> </head> <body> <img src="http://www.burstnet <table align="center"> <tr> <td> <img src="images/SHAV_topBar <div id="logo"> <span id="hello">Welcome!</span </div> <img src="images/SHAV_logo.jpg <img src="images/SHAV <div id="content"> <table> <tr> <td valign = "top"> <h1>In Vulnerability Management, Eliminating Risk<br>is the Reward</h1> <p class="copy">Your organization is constantly at risk. Thousands of new IT vulnerabilities emerge each year ... if you fall prey to just one, the consequences can be devastating.<br /><br /> What's the most effective way to manage these risks and protect your organization? That's exactly what a new Aberdeen Group Report uncovers. Discover Best-in-Class strategies for improving vulnerability management and reducing costs</p> <br> <a href="download.cfm </td> <td valign="center"> <a href="download.cfm <br /><br /><br /> </td> </tr> </table> </div> <div id="Boxes"> <table width="913px" align="center"> <tr><!--- images will be a piece of content ---> <td><a style="cursor: pointer;" onclick="userCheck('http: <td><a href="download.cfm <td><a href="download.cfm </tr> <tr><!--- boxes content ---> <td align="left" class="box-position-left" <img src="images/SHAV_boxTop <h3>Patching Adobe Software: Tips, Secrets and Solutions</h3> <p class="copy">Patching Adobe Software: Tips, Secrets and Solutions Hear from the experts the best practices to keep your network protected against Adobe vulnerabilities . View our on-demand webinar to learn how.</p> <a style="cursor: pointer;" onclick="userCheck('http: </div> <img src="images/SHAV </td> <td align="left" class="box-position"> <img src="images/SHAV_boxTop <h3>Why WSUS Isn't Enough</h3> <p class="copy">Multi for robust patch management, WSUS wasn't enough. Find out how they're saving time, reducing costs and gaining control and flexibility in a dynamic IT environment.</p> <a href="download.cfm </div> <img src="images/SHAV </td> <td align="left" class="box-position-right <img src="images/SHAV_boxTop <h3>You're 30 Minutes from Powerful Protection</h3> <p class="copy">Discover why thousands of companies trust Shavlik to manage their assets, patches and remediation ... including automatic configuration. With this FREE trial offer, you'll be up and running in just 30 minutes!</p> <p class="boxLink"><a href="download.cfm </div> <img src="images/SHAV </td> </tr> </table> <br /> </div> <div id=footer>Shavlik Technologies, LLC | <a href="http://learn </div> <img src="images/SHAV </td> </tr> </table> </body> </html> </html> |
Severity: | High |
Confidence: | Certain |
Host: | http://learn.shavlik.com |
Path: | /shavlik/index.cfm |
GET /shavlik/index.cfm?m=1009 Host: learn.shavlik.com Proxy-Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: CFID=610666; CFTOKEN=95679479 |
GET /shavlik/index.cfm?m=1009 Host: learn.shavlik.com Proxy-Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: CFID=610666; CFTOKEN=95679479 |
HTTP/1.1 200 OK Connection: close Date: Mon, 21 Mar 2011 11:45:08 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Type: text/html; charset=UTF-8 <iframe name = "regFrame" id = "regFrame" style="display:none;" width="800" height=400></iframe> <iframe name = "regFrame2" id = "regFrame2" style="display:none;" width="800" height=400></iframe> <script type="text/javascript"> function formCheck() { retValue = false; if(document.getEleme { alert("Please enter your First Name, between 2 and 55 characters"); } else if(document.getEleme { alert("Please enter your Last Name, between 2 and 55 characters"); } else if(document.getEleme { alert("Please enter your email address"); } else if((document.getElem { alert("Please enter a valid email address"); } else if(document.getEleme { alert("Please enter your Phone Number, at least 10 characters"); } else if(document.getEleme { alert("Please enter your Company Name"); } else if(document.getEleme { alert("Please Choose Your State"); } else if(document.getEleme { alert("Please Choose the size of your company"); } else if(document.getEleme { alert("Please Choose your job title"); } else { sLN = document.getElementById( document.getElementById( document.getElementById( document.getElementById( document.getElementById( if(document.getEleme { document.getElementById( document.getElementById( document.getElementById( } document.getElementById( if(document.getEleme sNET = document.getElementById( } else { sNET = document.getElementById( } if(document.getEleme { sCASE = document.getElementById( } else { sCASE = document.getElementById( } if(document.getEleme { sWEB = document.getElementById( } else { sWEB = document.getElementById( } retValue = true; sUrl = 'thank.cfm?bnetchk=' + sNET + '&bcaseStudy=' + sCASE + '&bwebinar=' + sWEB; Shadowbox.open({ content: sUrl, player: "iframe", width: 500, height: 400 }); } return retValue; } </script> <!-- caught error --> <!-- 0da03c--><script>alert(1)< <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <html xmlns="http://www.w3.org <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <title>Shavlik</title> <link rel="stylesheet" href="style/style5.css" type="text/css" media="all" /> <!--[if IE 6]> <style> #navitem a {padding-bottom:0px;} </style> <![endif]--> <script language="javascript" type="text/javascript"> function windowOpen(sURL, bFade, sWindowName) { if (bFade) { document.getElementById( } sWindowName = sWindowName || "newWindow"; nPosX = (window.screen.width/2) - (400); nPosY = (window.screen.height/2) - (350 + 75); newWindow = window.open(sURL newWindow.focus(); } var req; function docLoad(url) { req = false; // non IE if(window.XMLHttpRequest && !(window.ActiveXObject)) { try { req = new XMLHttpRequest(); } catch(e) { req = false; } // IE } else if(window.ActiveXObject) { try { req = new ActiveXObject("Msxml2 } catch(e) { try { req = new ActiveXObject("Microsoft } catch(e) { req = false; } } } if(req) { //req.onreadystatechange = processReqChange; req.open("GET", url, false); req.send(""); } //req = false; } function downloadRecord(fileID) { sURL = "download.cfm?nFileID=" + fileID + "&a=1"; docLoad(sURL); } </script> <link rel="stylesheet" type="text/css" href="shadowbox/shadowbox <script type="text/javascript" src="shadowbox/shadowbox <script type="text/javascript"> function userCheck(sURL,nID) { docLoad('userCheck.cfm'); if (req.responseText == 'num0') { Shadowbox.open({ content: 'download.cfm?nFileID=0&a player: "iframe" }); return true; } else if (sURL.search('.wmv') != -1) { Shadowbox.open({ content: sURL, player: "html", width: 700, height: 570 }); downloadRecord(nID); return true; } else { Shadowbox.open({ content: sURL, player: "flv", width: 640, height: 364 }); downloadRecord(nID); return true; } } Shadowbox.init({ modal: true }); </script> </head> <body> <div id="wrapper"> <div style="background-image <div id="container"> <div id="logo"> <a href="index.cfm?pg=374" target="_blank"><img src="images/SHAV_INT </div> <div id="topContainer"> <img src="images/Shav_LP <div id="content"> <h1 style="font-size:43px; margin-left:0;">It's 360.. Protection, 24/7</h1> <img src="images/SHAV_LP_patch <p class="contentCopy"> <strong>NetChk..</strong> Protect is the comprehensive agentless patch management system designed to meet today...s most pressing IT challenges. NetChk.. Protect simplifies the complexity of IT management by automating patching ... for both your operating system and for third-party applications ... so you...re protected from every angle. <br /><br /> In less than 30 minutes, <strong>NetChk..</strong> Protect will be up and running, detecting and deploying missing patches. <br /><br /> <strong>NetChk..</strong> Protect also includes the Sunbelt VIPRE Enterprise Antivirus + Antispyware + Antimalware engine to integrate world-class antivirus protection with comprehensive patch management for faster, more cost-effective network security. </p> </div> <div style="background-image </div> <div id="bottomContainer"><!-- <div id="leftBottom"> <a href="index.cfm?pg=704" style="text-decoration <h3 style="font-style:italic; <p class="bottomCopy">NetChk <h3 style="font-style:italic; <p class="bottomCopy">Click on the links below for detailed information on each functionality that can simplify your IT workload:</p> <ul class="bottomCopy" style="margin-left:15px; padding:0; line-height:26px;"> <li><a href="index.cfm?pg=697" class="current">Automated Patch Management</a></li> <li><a href="index.cfm?pg=698" <li><a href="index.cfm?pg=701" <li><a href="index.cfm?pg=699" </ul> </div> <div id="middleBottom"> <p class="bottomCopy" style="margin-top:0;">For a fraction of the money you spend for antivirus protection today, you can simplify the complexity of IT management and have complete protection against your top security threats.</p> <img src="images/Shav_LP </div> <!--- formDIV ---> <div id="rightBottom"> <tr> <td> <form name="DownloadInfo" method="post" action="http://www <p id="formHeader">Download a FREE Trial Today</p> <p class="bottomCopy" style="margin-bottom:0;" <div style="display:none;"> <input type="checkbox" name="caseStudy" id="caseStudy" value="1"> <input type="checkbox" name="webinar" id="webinar" value="1"> <input type="checkbox" name="netchk" id="netchk" value="1" checked> </div> <input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" /> <input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" /> <input type="hidden" name="__LASTFOCUS" id="__LASTFOCUS" value="" /> <!--- <input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwM <!--- <input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwM ---> <!--- <input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwM ---> <input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTYwM <!--- <script src="http://www.shavlik <!-- Begin registration form controls --> <table style="" id="formTable" cellpadding="5" cellspacing="0" border="0" align="left" class="copy"> <tr valign="top"> <td colspan="2"><div id="m_vsValidationSummary <!--- </div> ---> </td> </tr> <!-- First Name textbox and validators --> <tr> <td><div id="divLblFirstName" align="right">First Name:<span class="alert">*</span>< <td align="left"><input name="m_txtFirstName" type="text" maxlength="50" id="m_txtFirstName" style="width:200px;" value="" /> </td> </tr> <!-- Last Name textbox and validators --> <tr> <td><div id="divLblLastName" align="right">Last Name:<span class="alert">*</span>< <td align="left"><input name="m_txtLastName" type="text" maxlength="50" id="m_txtLastName" style="width:200px;" value="" /> </td> </tr> <!-- Email textbox and validators --> <tr> <td><div id="divLblEmail" align="right">Email:<span class="alert">*</span>< <td align="left"><input name="m_txtEmail" type="text" maxlength="50" id="m_txtEmail" style="width:200px;" value="" /> </td> </tr> <!-- Phone textbox and validators --> <tr> <td><div id="divLblPhone" align="right">Phone:<span class="alert">*</span>< <td align="left"><input name="m_txtPhone" type="text" maxlength="50" id="m_txtPhone" style="width:200px;" value="" /> </td> </tr> <!-- Company textbox and validators --> <tr> <td><div id="divLblCompany" align="right">Company: <td align="left"><input name="m_txtCompany" type="text" maxlength="200" id="m_txtCompany" type="text" name="m_txtCompany" size="20" style="width:200px;" value="" /> </td> </tr> <tr style="display: none;"> <td><div id="divLblCity" align="right">City:<span class="alert">*</span>< <td align="left"><input name="m_txtCity" type="text" maxlength="200" id="m_txtCity" type="text" name="m_txtCity" size="20" style="width:200px;" value="City" /> </td> </tr> <!-- State DropDownList --> <tr> <td><div id="divLblState" align="right">State:<span class="alert">*</span>< <td align="left"><select name="m_ddlStates" id="m_ddlStates" style="width:200px;"> <option value="0" selected="selected" > -select-</option> <option value="AL">Alabama< <option value="AK">Alaska</option <option value="AS">American Samoa</option> <option value="AZ">Arizona< <option value="AR">Arkansas< <option value="CA">California< <option value="CO">Colorado< <option value="CT">Connecticut< <option value="DE">Delaware< <option value="DC">District Of Columbia </option> <option value="FM">Federated States Of Micronesia </option> <option value="FL">Florida< <option value="GA">Georgia< <option value="GU">Guam</option> <option value="HI">Hawaii</option <option value="ID">Idaho</option> <option value="IL">Illinois< <option value="IN">Indiana< <option value="IA">Iowa</option> <option value="KS">Kansas</option <option value="KY">Kentucky< <option value="LA">Louisiana< <option value="ME">Maine</option> <option value="MH">Marshall Islands</option> <option value="MD">Maryland< <option value="MA">Massachusetts< <option value="MI">Michigan< <option value="MN">Minnesota< <option value="MS">Mississippi< <option value="MO">Missouri< <option value="MT">Montana< <option value="NE">Nebraska< <option value="NV">Nevada</option <option value="NH">New Hampshire</option> <option value="NJ">New Jersey</option> <option value="NM">New Mexico</option> <option value="NY">New York</option> <option value="NC">North Carolina</option> <option value="ND">North Dakota</option> <option value="MP">Northern Mariana Islands</option> <option value="OH">Ohio</option> <option value="OK">Oklahoma< <option value="OR">Oregon</option <option value="PW">Palau</option> <option value="PA">Pennsylvania< <option value="PR">Puerto Rico</option> <option value="RI">Rhode Island</option> <option value="SC">South Carolina</option> <option value="SD">South Dakota</option> <option value="TN">Tennessee< <option value="TX">Texas</option> <option value="UT">Utah</option> <option value="VT">Vermont< <option value="VI">Virgin Islands</option> <option value="VA">Virginia< <option value="WA">Washington< <option value="WV">West Virginia</option> <option value="WI">Wisconsin< <option value="WY">Wyoming< </select></td> </tr> <!-- Country DropDownList --> <tr> <td><div align="right">Country: <td align="left"><select name="m_ddlCountries" onchange="javascript <option selected="selected" value="1">USA</option> <option value="2">APO/FPO</option <option value="3">Canada</option> <option value="4">United Kingdom</option> <option value="5">Afghanistan< <option value="6">Albania</option <option value="7">Algeria</option <option value="8">American Samoa</option> <option value="9">Andorra</option <option value="10">Angola</option <option value="11">Anguilla< <option value="12">Antigua and Barbuda</option> <option value="13">Argentina< <option value="14">Armenia< <option value="15">Aruba</option> <option value="16">Australia< <option value="17">Austria< <option value="18">Azerbaijan Republic </option> <option value="19">Bahamas< <option value="20">Bahrain< <option value="21">Bangladesh< <option value="22">Barbados< <option value="23">Belarus< <option value="24">Belgium< <option value="25">Belize</option <option value="26">Benin</option> <option value="27">Bermuda< <option value="28">Bhutan</option <option value="29">Bolivia< <option value="30">Bosnia and Herzegovina</option> <option value="31">Botswana< <option value="32">Brazil</option <option value="33">British Virgin Islands</option> <option value="34">Brunei Darussalam</option> <option value="35">Bulgaria< <option value="36">Burkina Faso</option> <option value="37">Burma</option> <option value="38">Burundi< <option value="39">Cambodia< <option value="40">Cameroon< <option value="41">Canada</option <option value="42">Cape Verde Islands</option> <option value="43">Cayman Islands</option> <option value="44">Central African Republic</option> <option value="45">Chad</option> <option value="46">Chile</option> <option value="47">China</option> <option value="48">Colombia< <option value="49">Comoros< <option value="50">Congo, Democratic Republic of the </option> <option value="51">Congo, Republic of the</option> <option value="52">Cook Islands</option> <option value="53">Costa Rica</option> <option value="54">Cote d Ivoire (Ivory Coast)</option> <option value="55">Croatia, Republic of </option> <option value="56">Cuba</option> <option value="57">Cyprus</option <option value="58">Czech Republic</option> <option value="59">Denmark< <option value="60">Djibouti< <option value="61">Dominica< <option value="62">Dominican Republic</option> <option value="63">Ecuador< <option value="64">Egypt</option> <option value="65">El Salvador</option> <option value="66">Equatorial Guinea</option> <option value="67">Eritrea< <option value="68">Estonia< <option value="69">Ethiopia< <option value="70">Falkland Islands (Islas Malvinas)</option> <option value="71">Fiji</option> <option value="72">Finland< <option value="73">France</option <option value="74">French Guiana</option> <option value="75">French Polynesia</option> <option value="76">Gabon Republic</option> <option value="77">Gambia</option <option value="78">Georgia< <option value="79">Germany< <option value="80">Ghana</option> <option value="81">Gibraltar< <option value="82">Greece</option <option value="83">Greenland< <option value="84">Grenada< <option value="85">Guadeloupe< <option value="86">Guam</option> <option value="87">Guatemala< <option value="88">Guernsey< <option value="89">Guinea</option <option value="90">Guinea-Bissau< <option value="91">Guyana</option <option value="92">Haiti</option> <option value="93">Honduras< <option value="94">Hong Kong</option> <option value="95">Hungary< |