Reported by NVT "Nikto (NASL wrapper)" (1.3.6.1.4.1.25623.1.0.14260): Here is the Nikto report: Unknown option: ask --------------------------------------------------------------------------- - Nikto 1.36/1.37 - www.cirt.net + Target IP: 127.0.0.1 + Target Hostname: localhost + Target Port: 4080 + Start Time: Sun Mar 27 XX:44:14 2011 --------------------------------------------------------------------------- - Scan is dependent on "Server" string which can be faked, use -g to override + Server: MLdonkey/3.0.5 + No CGI Directories found (use '-C all' to force check all possible dirs) + /%0a%0a.jsp - Jetty jsp servlet engine is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /.aspx - Cross site scripting (XSS) is allowed with .aspx file requests (may be Microsoft .net). CA-2000-02. (GET) + /.jsp - Server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /.shtml - Server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /.thtml - Server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + / - Server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /~/.asp - Cross site scripting (XSS) is allowed with .asp file requests (may be Microsoft .net). CA-2000-02 (GET) + /~/.aspx?aspxerrorpath=null - Cross site scripting (XSS) is allowed with .aspx file requests (may be Microsoft .net). CA-2000-02 (GET) + /~/.aspx - Cross site scripting (XSS) is allowed with .aspx file requests (may be Microsoft .net). CA-2000-02 (GET) + /a? - Server is vulnerable to Cross Site Scripting (XSS) in the error message if code is passed in the query-string. This may be a Null HTTPd server. (GET) + /a.jsp/ - JServ is vulnerable to Cross Site Scripting (XSS) when a non-existent JSP file is requested. Upgrade to the latest version of JServ. CA-2000-02. (GET) + /acart2_0/admin/error.asp?msg= - Alan Ward A-Cart 2.0 contains several XSS vulnerabilities (GET) + /acart2_0/admin/index.asp?msg= - Alan Ward A-Cart 2.0 contains several XSS vulnerabilities (GET) + /acart2_0/deliver.asp?msg= - Alan Ward A-Cart 2.0 contains several XSS vulnerabilities (GET) + /acart2_0/error.asp?msg= - Alan Ward A-Cart 2.0 contains several XSS vulnerabilities (GET) + /acart2_0/signin.asp?msg= - Alan Ward A-Cart 2.0 contains several XSS vulnerabilities (GET) + /add.php3?url=ja&adurl=javascript: - AdManager 1.1 http://www.sugarfreenet.com/ is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /addressbook.php?\"> - PHP-Nuke 6.0 is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /modules/Submit/index.php?op=pre&title= - Basit cms 1.0 is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /msadm/domain/index.php3?account_name=\"> - The Sendmail Server Site Domain Administrator login is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /msadm/site/index.php3?authid=\"> - The Sendmail Server Site Administrator Login is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /msadm/user/login.php3?account_name=\"> - The Sendmail Server Site User login is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /myhome.php?action=messages&box= - OpenBB 1.0.0 RC3 is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /myphpnuke/links.php?op=MostPopular&ratenum=[script]alert(document.cookie) [/script]&ratetype=percent - myphpnuke is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /myphpnuke/links.php?op=search&query=[script]alert('Vulnerable) [/script]?query= - myphpnuke is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /nav/cList.php?root= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /netutils/findata.stm?user= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /netutils/ipdata.stm?ipaddr= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /netutils/whodata.stm?sitename= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /node/view/666\"> - Drupal 4.2.0 RC is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /Page/1,10966,,00.html?var= - Vignette server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. Upgrade to the latest version. (GET) + /phorum/admin/footer.php?GLOBALS[message]= - Phorum 3.3.2a and below from phorum.org is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phorum/admin/header.php?GLOBALS[message]= - Phorum 3.3.2a and below from phorum.org is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpBB/viewtopic.php?t=17071&highlight=\">\" - phpBB is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpBB/viewtopic.php?topic_id= - phpBB is vulnerable to Cross Site Scripting (XSS), upgrade to the latest version. CA-2000-02. (GET) + /phpimageview.php?pic=javascript:alert('Vulnerable') - PHP Image View 1.0 is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpinfo.php?VARIABLE= - Contains PHP configuration information and is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpinfo.php3?VARIABLE= - Contains PHP configuration information and is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phptonuke.php?filnavn= - PHPNuke add-on PHPToNuke is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpwebsite/index.php?module=calendar&calendar[view]=day&month=2&year=2003&day=1+%00\"> - phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpwebsite/index.php?module=fatcat&fatcat[user]=viewCategory&fatcat_id=1%00+\"> - phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpwebsite/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=10\">&MMN_position=[X:X] - phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /phpwebsite/index.php?module=search&SEA_search_op=continue&PDA_limit=10\"> - phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /pls/help/ - Oracle 9iAS is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /pm_buddy_list.asp?name=A&desc=B%22%3E%3Ca%20s=%22&code=1 - Web Wiz Forums ver. 7.01 and below is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /replymsg.php?send=1&destin= - This version of PHP-Nuke's replymsg.php is vulnerable to Cross Site Scripting (XSs). CA-2000-02. (GET) + /samples/search.dll?query= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /search.asp?term=<%00script>alert('Vulnerable') - ASP.Net 1.1 may allow Cross Site Scripting (XSS) in error pages (only some browsers will render this). CA-2000-02. (GET) + /search.php?searchfor=\"> - Siteframe 2.2.4 is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /search.php?searchstring= - Gallery 1.3.4 and below is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. BID-8288. (GET) + /search.php?zoom_query= - Wrensoft Zoom Search Engine is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /search/index.cfm? - Search agent allows Cross Site Scripting (XSS). CA-2000-02. (GET) + /servlet/ContentServer?pagename= - Open Market Inc.ÊContentServer is vulnerable to Cross Site Scripting (XSS) in the login-error page. CA-2000-02. (GET) + /servlet/CookieExample?cookiename= - Bajie HTTP JServer is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (POST) + /servlet/custMsg?guestName= - Bajie HTTP JServer is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (POST) + /setup.exe?&page=list_users&user=P - CiscoSecure ACS v3.0(1) Build 40 allows Cross Site Scripting (XSS). CA-2000-02. (GET) + /sgdynamo.exe?HTNAME= - Ecometry's SGDynamo is vulnerable to Cross Site Scripting (XSS). ÊCAN-2002-0375. CA-2000-02. (GET) + /shopdisplayproducts.asp?id=1&cat= - VP-ASP SHopping Cart 4.x shopdisplayproducts.asp XSS. OSVDB-2921. BID-9164 (GET) + /shopping/shopdisplayproducts.asp?id=1&cat= - VP-ASP prior to 4.50 are vulnerable to XSS attacks (GET) + /soinfo.php?\"> - The PHP script soinfo.php is vulnerable to Cross Site Scripting CA-2000-02. Set expose_php = Off in php.ini. (GET) + /SPHERA/login/sm_login_screen.php?error=\"> - SPHERA HostingDirector and Final User (VDS) Control Panel 1-3 are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /SPHERA/login/sm_login_screen.php?uid=\"> - SPHERA HostingDirector and Final User (VDS) Control Panel 1-3 are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /ss000007.pl?PRODREF= - Actinic E-Commerce services is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /submit.php?subject=&story=&storyext=&op=Preview - This install of PHPNuke is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sunshop.index.php?action=storenew&username= - SunShop is vulnerable to Cross Site Scripting (XSS) in the signup page. CA-200-02. (GET) + /supporter/index.php?t=ticketfiles&id=< script> < /script> - MyHelpdesk from http://myhelpdesk.sourceforge.net/ versions v20020509 and older are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /supporter/index.php?t=tickettime&id=< script> < /script> - MyHelpdesk from http://myhelpdesk.sourceforge.net/ versions v20020509 and older are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /supporter/index.php?t=updateticketlog&id=< script> < /script> - MyHelpdesk from http://myhelpdesk.sourceforge.net/ versions v20020509 and older are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /syshelp/cscript/showfnc.stm?pkg= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /syshelp/cscript/showfncs.stm?pkg= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /syshelp/cscript/showfunc.stm?func= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /syshelp/stmex.stm?foo= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /syshelp/stmex.stm?foo=123&bar= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/create.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/edit.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/edit.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/ftp.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/htaccess.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/iecreate.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/ieedit.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/ieedit.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/info.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/info.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/mkdir.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/rename.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/rename.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/search.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/search.stm?query= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/sendmail.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/sendmail.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/template.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/update.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/update.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/vccheckin.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/vccheckin.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/vccreate.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/vccreate.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/vchist.stm?name= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /sysuser/docmgr/vchist.stm?path= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /templates/form_header.php?noticemsg= - MyMarket 1.71 is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /theme1/selector?button=status,monitor,session\">&button_url=/system/status/status,/system/status/moniter,/system/status/session - Fortigate firewall 2.50 and prior contains several CSS vulnerabilities in various administrative pages. (GET) + /theme1/selector?button=status,monitor,session&button_url=/system/status/status,/system/status/moniter,/system/status/session\"> - Fortigate firewall 2.50 and prior contains several CSS vulnerabilities in various administrative pages. (GET) + /theme1/selector?button=status,monitor,session&button_url=/system/status/status,/system/status/moniter\">,/system/status/session - Fortigate firewall 2.50 and prior contains several CSS vulnerabilities in various administrative pages. (GET) + /theme1/selector?button=status,monitor,session&button_url=/system/status/status\">,/system/status/moniter,/system/status/session - Fortigate firewall 2.50 and prior contains several CSS vulnerabilities in various administrative pages. (GET) + /themes/mambosimple.php?detection=detected&sitename= - Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /upload.php?type=\" - Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /user.php?op=confirmnewuser&module=NS-NewUser&uname=%22%3E%3Cimg%20src=%22javascript:alert(document.cookie) %22%3E&email=test@test.com - Post Nuke 0.7.2.3-Phoenix is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /user.php?op=userinfo&uname= - The PhpNuke installation is vulnerable to Cross Site Scripting (XSS). Update to versions above 5.3.1. CA-2000-02. (GET) + /webcalendar/colors.php?color= - Webcalendar 0.9.42 and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webcalendar/week.php?eventinfo= - Webcalendar 0.9.42 and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webcalendar/week.php?user=\"> - Webcalendar 0.9.42 and below are vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/ccvsblame.cgi?file=/index.html&root= - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/cvsblame.cgi?file= - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/cvslog.cgi?file=*&rev=&root= - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/cvslog.cgi?file= - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/cvsquery.cgi?branch=&file=&date= - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/cvsquery.cgi?module=&branch=&dir=&file=&who=&sortby=Date&hours=2&date=week - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/cvsqueryform.cgi?cvsroot=/cvsroot&module=&branch=HEAD - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /webtools/bonsai/showcheckins.cgi?person= - Bonsai is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /wwwping/index.stm?wwwsite= - Sambar Server default script is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + Over 20 "OK" messages, this may be a by-product of the server + answering all requests with a "200 OK" message. You should manually + verify your results. + 1930 items checked - 219 item(s) found on remote host(s) + End Time: Sun Mar 27 16:44:40 2011 (26 seconds) --------------------------------------------------------------------------- + 1 host(s) tested ==================================================================== Reported by NVT "Web mirroring" (1.3.6.1.4.1.25623.1.0.10662): The following CGI have been discovered : Syntax : cginame (arguments [default value]) /submit (q [] ) ==================================================================== Reported by NVT "MLDonkey web interface detection" (1.3.6.1.4.1.25623.1.0.11125): MLDonkey web interface might be running on this port. This peer to peer software is used to share files. 1. This may be illegal. 2. You may have access to confidential files 3. It may eat too much bandwidth Solution: disable it Risk factor : Medium MLDonkey Version (3.0.5) was detected on the remote host. ==================================================================== Reported by NVT "HTTP Server type and version" (1.3.6.1.4.1.25623.1.0.10107): The remote web server type is : MLdonkey/3.0.5 ==================================================================== Reported by NVT "Services" (1.3.6.1.4.1.25623.1.0.10330): A web server is running on this port