2. Cookie scoped to parent domain
3. Cookie without HttpOnly flag set
Severity: | High |
Confidence: | Certain |
Host: | http://au.track |
Path: | /n/13465/13553/www |
GET /n/13465/13553/1257a%0d%0a5c54a5c22bc/5143c0dd00250300000 Host: au.track.decideinter Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 302 Found Date: Fri, 28 Jan 2011 14:12:05 GMT Server: Apache/1.3.33 (Unix) Pragma: no-cache Expires: Fri, 28 Jan 2011 14:12:05 GMT location: http://1257a 5c54a5c22bc Set-Cookie: id=9272912264552253015; expires=Sat, 28-Jan-2012 14:12:05 GMT; path=/; domain=.decideinteractive Set-Cookie: name=9272912264602585191; path=/; domain=.decideinteractive Content-Length: 0 Keep-Alive: timeout=60 Connection: Keep-Alive Content-Type: text/plain |
Severity: | Information |
Confidence: | Certain |
Host: | http://au.track |
Path: | /n/13465/13553/www |
GET /n/13465/13553/www Host: au.track.decideinter Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 302 Found Date: Fri, 28 Jan 2011 14:12:05 GMT Server: Apache/1.3.33 (Unix) Pragma: no-cache Expires: Fri, 28 Jan 2011 14:12:05 GMT location: http://www.247realmedia Set-Cookie: id=9272912264837465719; expires=Sat, 28-Jan-2012 14:12:05 GMT; path=/; domain=.decideinteractive Set-Cookie: name=9272912264820689035; path=/; domain=.decideinteractive Content-Length: 0 Keep-Alive: timeout=60 Connection: Keep-Alive Content-Type: text/plain |
Severity: | Information |
Confidence: | Certain |
Host: | http://au.track |
Path: | /n/13465/13553/www |
GET /n/13465/13553/www Host: au.track.decideinter Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close |
HTTP/1.1 302 Found Date: Fri, 28 Jan 2011 14:12:05 GMT Server: Apache/1.3.33 (Unix) Pragma: no-cache Expires: Fri, 28 Jan 2011 14:12:05 GMT location: http://www.247realmedia Set-Cookie: id=9272912264837465719; expires=Sat, 28-Jan-2012 14:12:05 GMT; path=/; domain=.decideinteractive Set-Cookie: name=9272912264820689035; path=/; domain=.decideinteractive Content-Length: 0 Keep-Alive: timeout=60 Connection: Keep-Alive Content-Type: text/plain |