2. Cross-site scripting (reflected)
Severity: | High |
Confidence: | Certain |
Host: | http://bs.serving-sys.com |
Path: | /BurstingPipe/adServer.bs |
GET /BurstingPipe/adServer.bs Host: bs.serving-sys.com Proxy-Connection: keep-alive Referer: http://static.promo2 Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: F1=00UilH0003sY9QVZ; ActivityInfo=000nx2bhf |
HTTP/1.1 302 Object moved Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 0 Content-Type: text/html Expires: Sun, 05-Jun-2005 22:00:00 GMT Location: http://www.scionav.com Server: Microsoft-IIS/7.5 Set-Cookie: eyeblaster=BWVal=244 7725d3c3fde; expires=Thu, 31-Dec-2037 22: 00:00 GMT; domain=bs.serving-sys.com Set-Cookie: A2=fwhZ9YvQ0bdR00008 Set-Cookie: B2=7DEA0820wsi71cT08 Set-Cookie: C3=0tMpo61wsj0001000 Set-Cookie: D3=0u4d02WRg410sk0rW Set-Cookie: E2=09NH820wsj07Hso61 Set-Cookie: u2=995a2f09-c0fe-419b Set-Cookie: u3=1; expires=Thu, 31-Dec-2037 22:00:00 GMT; domain=.serving-sys.com; path=/ Set-Cookie: U=995a2f09-c0fe-419b-bf0a P3P: CP="NOI DEVa OUR BUS UNI" Date: Sun, 19 Dec 2010 16:25:59 GMT Connection: close |
Severity: | High |
Confidence: | Certain |
Host: | http://bs.serving-sys.com |
Path: | /BurstingPipe/Activi |
GET /BurstingPipe/Activi Host: bs.serving-sys.com Proxy-Connection: keep-alive Referer: http://www.rackspace.com Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: ActivityInfo=000nx2bhf |
HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html Expires: Sun, 05-Jun-2005 22:00:00 GMT Vary: Accept-Encoding Set-Cookie: F1=00UilH0003sY9QVZ; expires=Thu, 31-Dec-2037 22:00:00 GMT; domain=.serving-sys.com; path=/ Set-Cookie: ActivityInfo=000nx2bhf Set-Cookie: u2=995a2f09-c0fe-419b Set-Cookie: u3=1; expires=Thu, 31-Dec-2037 22:00:00 GMT; domain=.serving-sys.com; path=/ Set-Cookie: U=995a2f09-c0fe-419b-bf0a P3P: CP="NOI DEVa OUR BUS UNI" Date: Sun, 19 Dec 2010 13:28:28 GMT Connection: close Content-Length: 256 var s_1_Integrate_Eyeblaster |