1. Cross-site scripting (reflected)
2. Cross-domain Referer leakage
Severity: | High |
Confidence: | Certain |
Host: | http://www.twiclur.com |
Path: | /twiclur.php |
GET /twiclur.php?q=exinda Host: www.twiclur.com Proxy-Connection: keep-alive Referer: http://www1.exinda.com/ User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Date: Thu, 14 Apr 2011 14:30:09 GMT Server: Apache Vary: Accept-Encoding Content-Length: 6346 Content-Type: text/html <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <html xmlns="http://www.w3.org <head> <meta http-equiv="Content-T ...[SNIP]... <a target="_parent" href="http://www.twitter ...[SNIP]... |
Severity: | Information |
Confidence: | Certain |
Host: | http://www.twiclur.com |
Path: | /twiclur.php |
GET /twiclur.php?q=exinda Host: www.twiclur.com Proxy-Connection: keep-alive Referer: http://www1.exinda.com/ User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Date: Thu, 14 Apr 2011 14:28:52 GMT Server: Apache Vary: Accept-Encoding Content-Length: 6299 Content-Type: text/html <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR <html xmlns="http://www.w3.org <head> <meta http-equiv="Content-T ...[SNIP]... <div class="heading"> <a target="_parent" href="http://www.twitter ...[SNIP]... </b> Builds on WAN Optimization Leadership with Record Results in Q1 2011 - PR Newswire (pres <a target="_parent" href="http://uxp.in ...[SNIP]... </b>, record new customer growth Q1 2011 <a target="_parent" href="http://pop.to/1xdb" ...[SNIP]... </b> reports record new customer growth in Q1 2011 <a target="_parent" href="http://ow.ly/4zSHP" ...[SNIP]... </b> Add NetFlow Support <a target="_parent" href="http://bit.ly ...[SNIP]... </b> Builds on WAN Optimization Leadership with Record Results in Q1 2011 <a target="_parent" href="http://prn.to ...[SNIP]... |