XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection
Netsparker - Scan Report Summary
TARGET URL
http://response.restoration.noaa.gov/dwh.php?...
SCAN DATE
2/26/2011 7:55:02 AM
REPORT DATE
2/26/2011 7:55:53 AM
SCAN DURATION
00:00:24
Total Requests
Redacted
Average Speed
Redacted
req/sec.
7
identified
3
confirmed
1
critical
3
informational
GHDB, DORK Tests
GHDB, DORK Tests
PROFILE
Previous Settings
ENABLED ENGINES
Boolean SQL Injection, SQL Injection
Authentication
Scheduled
VULNERABILITIES
Vulnerabilities
CRITICAL
14 %
LOW
43 %
INFORMATION
43 %
Boolean Based SQL Injection
Boolean Based SQL Injection
1
TOTAL
CRITICAL
CONFIRMED
1
SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Netsparker confirmed the vulnerability by executing a test SQL Query on the back-end database. In these tests, SQL Injection was not obvious but the different responses from the page based on the injection test allowed Netsparker to identify and confirm the SQL Injection.
Impact
Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:
Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database
Actions to Take
See the remedy for solution.
If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM change all legacy code to use these new libraries)
Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.
Remedy
The best way to protect your code against SQL Injections is using parameterised queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.
Required Skills for Successful Exploitation
There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them.
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Coral Reefs: Spills and Other Threats | Protecting Coastal Resources | Pollutants in the Environment | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="keywords" content="oil spill response, coral, spills, ecosystem, planning, coral reefs, pollutants, fishing, developing, impacts, oil spills, global warming"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr> <td> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0"> <tr height="109"> <td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td> </tr> <tr> <td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td> </tr> </table> </td> </tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_pollution.jpg' alt='Pollutants in the Environment'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'>Emergency Response</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'><strong><font color='black'>Pollutants in the Environment</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href="../../current_news_topic.php" target="_self">Current News</a></td> </tr> <tr> <td> <a href="../../special_note_topic.php" target="_self">Special Note</a></td> </tr> <tr> <td> <a href="../../faq_catalog.php" target="_self">FAQs</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2"> <caption> <div align="left"> <span class="sidebar_titles">Catalogs of:</span> </div> </caption> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td> </tr> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td> </tr> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td> </tr> <tr> <td> <a href="../../link_catalog.php" target="_self">Links</a> </td> </tr> <tr> <td> <a href="../../resource_catalog.php" target="_self">Downloads</a> </td> </tr> <tr> <td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a> </td> </tr> <tr> <td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a> </td> </tr> <tr> <td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href="orr_about.php" target="_self">About OR&R</a> </td> </tr> <tr> <td> <a href="orr_contact.php" target="_self">Contact Us</a> </td> </tr> <tr> <td> <a href="orr_search.php" target="_self">Advanced Search</a> </td> </tr> <tr> <td> <a href="orr_index_topic.php" target="_self">Site Index</a> </td> </tr> <tr> <td> <a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td> </tr> <tr> <td> <a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td> </tr> </table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Coral Reefs: Spills and Other Threats</span></p> <p> <!-- title / graphic / text block 1 --> <table class="no_overlap" width="525" border="0" cellspacing="0" align="left"> <tr> <td class="graphic_cell_padding" align="center" valign="middle"> <img src='/art_gallery/oilgaleta.jpg' alt='Oil slicks moving onto coral reefs at Galeta at low tide; Bahia las Minas refinery spill, Panama, April, 1996.' width='350' border='1'> </td> <td class="graphic_cell_padding" width="33%" align="center" valign="middle"> <span class="photo_caption">Oil slicks moving onto coral reefs at Galeta at low tide; Bahia las Minas refinery spill, Panama, April, 1986. <em>Photo: John Cubit.</em></span> </td> </tr> </table> </p> <p><span class="feature_title"></span></p> <p>Coral reefs are highly productive and diverse ecosystems that are not only beautiful, but are also very valuable economically and environmentally. Today, many coral reefs are suffering degradation from a variety of causes, including climate change, pollutants, overfishing, development, and physical disturbances. Coral habitats are also vulnerable to impacts from oil spills. <P>Because these systems are fragile, we are especially careful to respond appropriately to spills or potential spills in these areas. By understanding how our actions can affect coral reef ecosystems, we can do a better job of protecting them from further harm.</p> <p> <!-- inline linkbox 1 --> <span class="feature_title">For More Information</span> <br> <ul> <li><a href='/topic_subtopic_entry.php?RECORD_KEY%28entry_subtopic_topic%29=entry_id,subtopic_id,topic_id&entry_id(entry_subtopic_topic)=5&subtopic_id(entry_subtopic_topic)=8&topic_id(entry_subtopic_topic)=1' target="_self"><span class="link_title">Coral Reefs and Oil Spills: A Guided Tour</span></a> <span class="link_notes">Get a basic overview of coral ecology, learn what types of things can harm coral, and see how resp..
Cookie Not Marked As HttpOnly
Cookie Not Marked As HttpOnly
1
TOTAL
LOW
CONFIRMED
1
Cookie was not marked as HTTPOnly. HTTPOnly cookies can not be read by client-side scripts therefore marking a cookie as HTTPOnly can provide an additional layer of protection against Cross-site Scripting attacks..
Impact
During a Cross-site Scripting attack an attacker might easily access cookies and hijack the victim's session.
Actions to Take
See the remedy for solution
Consider marking all of the cookies used by the application as HTTPOnly (After these changes javascript code will not able to read cookies.
Remedy
Mark the cookie as HTTPOnly. This will be an extra layer of defence against XSS. However this is not a silver bullet and will not protect the system against Cross-site Scripting attacks. An attacker can use a tool such as XSS Tunnel to bypass HTTPOnly protection.
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Publications, Factsheets and One-Pagers | Recent and Historical Incidents | Emergency Response | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="robots" content="noindex,nofollow,noarchive"> <meta name="keywords" content="Deepwater Horizon oil rig fire, Deepwater Horizon oil well fire, MODU, Mississippi Canyon 252, Louisiana, Mississippi"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr> <td> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0"> <tr height="109"> <td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td> </tr> <tr> <td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td> </tr> </table> </td> </tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_emergency.jpg' alt='Emergency Response'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'><strong><font color='black'>Emergency Response</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'>Pollutants in the Environment</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href="../../current_news_topic.php" target="_self">Current News</a></td> </tr> <tr> <td> <a href="../../special_note_topic.php" target="_self">Special Note</a></td> </tr> <tr> <td> <a href="../../faq_catalog.php" target="_self">FAQs</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2"> <caption> <div align="left"> <span class="sidebar_titles">Catalogs of:</span> </div> </caption> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td> </tr> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td> </tr> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td> </tr> <tr> <td> <a href="../../link_catalog.php" target="_self">Links</a> </td> </tr> <tr> <td> <a href="../../resource_catalog.php" target="_self">Downloads</a> </td> </tr> <tr> <td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a> </td> </tr> <tr> <td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a> </td> </tr> <tr> <td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href="orr_about.php" target="_self">About OR&R</a> </td> </tr> <tr> <td> <a href="orr_contact.php" target="_self">Contact Us</a> </td> </tr> <tr> <td> <a href="orr_search.php" target="_self">Advanced Search</a> </td> </tr> <tr> <td> <a href="orr_index_topic.php" target="_self">Site Index</a> </td> </tr> <tr> <td> <a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td> </tr> <tr> <td> <a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td> </tr> </table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr><td colspan='2'><table border='0' cellspacing='0' cellpadding='0' align='center'><tr><td class='entrygroup_table'><a href='dwh.php?entry_id=809' target='_self'>Latest News</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=811' target='_self'>NOAA Roles</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=814' target='_self'>NOAA People</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=819' target='_self'>External Affairs</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=812' target='_self'><strong>Factsheets Publications</strong></a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=820' target='_self'>Press Releases</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=813' target='_self'>Multimedia</a></td></tr></table></td></tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <table class="sidebar_table" width="158" border="0" cellspacing="4" cellpadding="8"> <tr> <td> <span class="sidebar_titles">For more information</span><br> </td> </tr> <tr> <td class="sidebar_cell"> <a href='/deepwaterhorizon/informationresources' target="_self"><span class="link_title">Information Resources</span></a><br> <span class="link_notes">A collection of links to other web sites with Deepwater Horizon information.</span> <span class="link_info"></span> </td> </tr> </table> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Publications, Factsheets and One-Pagers</span></p> <p> <!-- title / graphic / text block 1 --> </p> <p><span class="feature_title"></span></p> <p>Download more detailed documents with background and technical information. <P><ul><li><a href="#currentmaps">Cumulative Trajectory Maps</a><BR> <li><a ..
PHP Version Disclosure
PHP Version Disclosure
1
TOTAL
LOW
Netsparker identified that the target web server is disclosing the PHP version in use through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of PHP.
Impact
An attacker can look for specific security vulnerabilities for the version identified. Also the attacker can use this information in conjunction with the other vulnerabilities in the application or the web server.
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Publications, Factsheets and One-Pagers | Recent and Historical Incidents | Emergency Response | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="robots" content="noindex,nofollow,noarchive"> <meta name="keywords" content="Deepwater Horizon oil rig fire, Deepwater Horizon oil well fire, MODU, Mississippi Canyon 252, Louisiana, Mississippi"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr> <td> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0"> <tr height="109"> <td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td> </tr> <tr> <td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td> </tr> </table> </td> </tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_emergency.jpg' alt='Emergency Response'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'><strong><font color='black'>Emergency Response</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'>Pollutants in the Environment</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href="../../current_news_topic.php" target="_self">Current News</a></td> </tr> <tr> <td> <a href="../../special_note_topic.php" target="_self">Special Note</a></td> </tr> <tr> <td> <a href="../../faq_catalog.php" target="_self">FAQs</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2"> <caption> <div align="left"> <span class="sidebar_titles">Catalogs of:</span> </div> </caption> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td> </tr> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td> </tr> <tr> <td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td> </tr> <tr> <td> <a href="../../link_catalog.php" target="_self">Links</a> </td> </tr> <tr> <td> <a href="../../resource_catalog.php" target="_self">Downloads</a> </td> </tr> <tr> <td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a> </td> </tr> <tr> <td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a> </td> </tr> <tr> <td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href="orr_about.php" target="_self">About OR&R</a> </td> </tr> <tr> <td> <a href="orr_contact.php" target="_self">Contact Us</a> </td> </tr> <tr> <td> <a href="orr_search.php" target="_self">Advanced Search</a> </td> </tr> <tr> <td> <a href="orr_index_topic.php" target="_self">Site Index</a> </td> </tr> <tr> <td> <a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td> </tr> <tr> <td> <a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td> </tr> </table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr><td colspan='2'><table border='0' cellspacing='0' cellpadding='0' align='center'><tr><td class='entrygroup_table'><a href='dwh.php?entry_id=809' target='_self'>Latest News</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=811' target='_self'>NOAA Roles</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=814' target='_self'>NOAA People</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=819' target='_self'>External Affairs</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=812' target='_self'><strong>Factsheets Publications</strong></a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=820' target='_self'>Press Releases</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=813' target='_self'>Multimedia</a></td></tr></table></td></tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <table class="sidebar_table" width="158" border="0" cellspacing="4" cellpadding="8"> <tr> <td> <span class="sidebar_titles">For more information</span><br> </td> </tr> <tr> <td class="sidebar_cell"> <a href='/deepwaterhorizon/informationresources' target="_self"><span class="link_title">Information Resources</span></a><br> <span class="link_notes">A collection of links to other web sites with Deepwater Horizon information.</span> <span class="link_info"></span> </td> </tr> </table> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Publications, Factsheets and One-Pagers</span></p> <p> <!-- title / graphic / text block 1 --> </p> <p><span class="feature_title"></span></p> <p>Download more detailed documents with background and technical information. <P><ul><li><a href="#currentmaps">Cumulative Trajectory Maps</a><BR> <li><a ..
Programming Error Message
Programming Error Message
1
TOTAL
LOW
Netsparker identified a programming error message.
Impact
The error message may disclose sensitive information and this information can be used by an attacker to mount new attacks or to enlarge the attack surface. Source code, stack trace, etc. type data may be disclosed. Most of these issues will be identified and reported separately by Netsparker.
Remedy
Do not provide error messages on production environments. Save error messages with a reference number to a backend storage such as a log, text file or database then show this number and a static user-friendly error message to the user.
<b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>25</b>
Request
GET /dwh.php?entry_id=%2527 HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) Cache-Control: no-cache Host: response.restoration.noaa.gov Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22 Accept-Encoding: gzip, deflate
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <br /><b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>25</b><br />
MySQL Database Identified
MySQL Database Identified
1
TOTAL
INFORMATION
CONFIRMED
1
Netsparker identified that the target web site is using a MySQL Server. This is generally not a security issue and is reported here for information purposes.
Impact
This issue is reported as additional information only, there is no direct impact arising from this issue.
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <br /><b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>267</b><br />
E-mail Address Disclosure
E-mail Address Disclosure
1
TOTAL
INFORMATION
Netsparker found e-mail addresses on the web site.
Impact
E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .
Remedy
Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <br /><b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>25</b><br />