1. Cross-site scripting (reflected)
1.1. http://ciscosystemsinc.tt.omtrdc.net/m2/ciscosystemsinc/mbox/ajax [mbox parameter]
Severity: | High |
Confidence: | Certain |
Host: | http://ciscosystemsinc.tt |
Path: | /m2/ciscosystemsinc/mbox |
GET /m2/ciscosystemsinc/mbox Host: ciscosystemsinc.tt.omtrdc Proxy-Connection: keep-alive Referer: http://www.cisco.com/en Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/JavaScript Content-Length: 318 Date: Sun, 19 Dec 2010 16:26:47 GMT Server: Test & Target mboxFactories.get( ...[SNIP]... |
Severity: | High |
Confidence: | Certain |
Host: | http://comcastreside |
Path: | /m2/comcastresidenti |
GET /m2/comcastresidenti Host: comcastresidentialse Proxy-Connection: keep-alive Referer: http://shop.comcast.com Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 209 Date: Sun, 19 Dec 2010 16:26:39 GMT Server: Test & Target mboxFactories.get( |
Severity: | High |
Confidence: | Certain |
Host: | http://comcastreside |
Path: | /m2/comcastresidenti |
GET /m2/comcastresidenti Host: comcastresidentialse Proxy-Connection: keep-alive Referer: http://shop.comcast.com Accept: */* User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* |
HTTP/1.1 200 OK pragma: no-cache Content-Type: text/javascript Content-Length: 824 Date: Sun, 19 Dec 2010 16:26:41 GMT Server: Test & Target var mboxCurrent=mboxFactories ...[SNIP]... |