- Nikto v2.5.0 --------------------------------------------------------------------------- + Multiple IPs found: 3.212.91.35, 54.156.13.12, 2600:1f18:16e:df02::1f4, 2600:1f18:16e:df00::1f4 + Target IP: 3.212.91.35 + Target Hostname: www.armholding.ae + Target Port: 80 + Start Time: 2024-07-23 07:13:07 (GMT-4) --------------------------------------------------------------------------- + Server: Netlify + /: Netlify was identified by the x-nf-request-id header. See: https://www.netlify.com/ + Root page / redirects to: https://www.armholding.ae/ + No CGI Directories found (use '-C all' to force check all possible dirs) + /themes/mambosimple.php?detection=detected&sitename=: Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /index.php?option=search&searchword=: Mambo Site Server 4.0 build 10 is vulnerable to Cross Site Scripting (XSS). + /emailfriend/emailnews.php?id=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /emailfriend/emailfaq.php?id=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /emailfriend/emailarticle.php?id=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /administrator/upload.php?newbanner=1&choice=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). + /administrator/popups/sectionswindow.php?type=web&link=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /administrator/gallery/view.php?path=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /administrator/gallery/uploadimage.php?directory=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /administrator/gallery/navigation.php?directory=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /administrator/gallery/gallery.php?directory=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1204 + /index.php?dir=: Auto Directory Index 1.2.3 and prior are vulnerable to XSS attacks. See: https://vulners.com/osvdb/OSVDB:2820 + /https-admserv/bin/index?/: Sun ONE Web Server 6.1 administration control is vulnerable to XSS attacks. + /clusterframe.jsp?cluster=: Macromedia JRun 4.x JMC Interface, clusterframe.jsp file is vulnerable to a XSS attack. See: OSVDB-2876 + /upload.php?type=\": Mambo PHP Portal/Server is vulnerable to Cross Site Scripting (XSS). + /soinfo.php?\">: The PHP script soinfo.php is vulnerable to Cross Site Scripting. Set expose_php = Off in php.ini. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1954 + /servlet/MsgPage?action=test&msg=: NetDetector 3.0 and below are vulnerable to Cross Site Scripting (XSS). + /servlets/MsgPage?action=badlogin&msg=: The NetDetector install is vulnerable to Cross Site Scripting (XSS) in its invalid login message. + /admin/sh_taskframes.asp?Title=Configuraci%C3%B3n%20de%20registro%20Web&URL=MasterSettings/Web_LogSettings.asp?tab1=TabsWebServer%26tab2=TabsWebLogSettings%26__SAPageKey=5742D5874845934A134CD05F39C63240&ReturnURL=\">: IIS 6 on Windows 2003 is vulnerable to Cross Site Scripting (XSS) in certain error messages. + /SiteServer/Knowledge/Default.asp?ctr=\">: Site Server is vulnerable to Cross Site Scripting. See: OSVDB-17665 + /_mem_bin/formslogin.asp?\">: Site Server is vulnerable to Cross Site Scripting. See: OSVDB-17666 + /webcalendar/week.php?eventinfo=: Webcalendar 0.9.42 and below are vulnerable to Cross Site Scripting (XSS). See: OSVDB-3624 + /user.php?op=userinfo&uname=: The PHP-Nuke installation is vulnerable to Cross Site Scripting (XSS). Update to versions above 5.3.1. + /templates/form_header.php?noticemsg=: MyMarket 1.71 is vulnerable to Cross Site Scripting (XSS). See: OSVDB-41361 + /supporter/index.php?t=updateticketlog&id=<script></script>: MyHelpdesk versions v20020509 and older are vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0931 + /supporter/index.php?t=tickettime&id=<script></script>: MyHelpdesk versions v20020509 and older are vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0931 + /supporter/index.php?t=ticketfiles&id=<script></script>: MyHelpdesk versions v20020509 and older are vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0931 + /sunshop.index.php?action=storenew&username=: SunShop is vulnerable to Cross Site Scripting (XSS) in the signup page. + /submit.php?subject=&story=&storyext=&op=Preview: This install of PHP-Nuke is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1524 + /ss000007.pl?PRODREF=: Actinic E-Commerce services is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1732 + /setup.exe?&page=list_users&user=P: CiscoSecure ACS v3.0(1) Build 40 allows Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0938 + /servlet/ContentServer?pagename=: Open Market Inc. ContentServer is vulnerable to Cross Site Scripting (XSS) in the login-error page. See: OSVDB-2689 + /search.php?searchstring=: Gallery 1.3.4 and below is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. http://www.securityfocus.com/bid/8288. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0614 + /search.php?searchfor=\">: Siteframe 2.2.4 is vulnerable to Cross Site Scripting (XSS). See: OSVDB-50551 + /search.asp?term=<%00script>alert('Vulnerable'): ASP.Net 1.1 may allow Cross Site Scripting (XSS) in error pages (only some browsers will render this). + /samples/search.dll?query=&logic=AND: Sambar Server default script is vulnerable to Cross Site Scripting (XSS). + /replymsg.php?send=1&destin=: This version of PHP-Nuke's replymsg.php is vulnerable to Cross Site Scripting (XSS). + /postnuke/modules.php?op=modload&name=Web_Links&file=index&req=viewlinkdetails&lid=666&ttitle=Mocosoft+Utilities\"%3: Postnuke Phoenix 0.7.2.3 is vulnerable to Cross Site Scripting (XSS). + /pm_buddy_list.asp?name=A&desc=B%22%3E%3Ca%20s=%22&code=1: Web Wiz Forums ver. 7.01 and below is vulnerable to Cross Site Scripting (XSS). See: OSVDB-4599 + /phpwebsite/index.php?module=search&SEA_search_op=continue&PDA_limit=10\">: phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). + /phpwebsite/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=10\">&MMN_position=[X:X]: phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). + /phpwebsite/index.php?module=fatcat&fatcat[user]=viewCategory&fatcat_id=1%00+\">: phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). + /phpwebsite/index.php?module=calendar&calendar[view]=day&month=2&year=2003&day=1+%00\">: phpWebSite 0.9.x and below are vulnerable to Cross Site Scripting (XSS). + /phptonuke.php?filnavn=: PHP-Nuke add-on PHPToNuke is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1995 + /phpinfo.php?VARIABLE=: Contains PHP configuration information and is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1287 + /phpinfo.php3?VARIABLE=: Contains PHP configuration information and is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1287 + /phpBB/viewtopic.php?topic_id=: phpBB is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0484 + /phpBB/viewtopic.php?t=17071&highlight=\">\": phpBB is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0484 + /phorum/admin/header.php?GLOBALS[message]=: Phorum 3.3.2a and below from phorum.org is vulnerable to Cross Site Scripting (XSS). See: OSVDB-11145 + /phorum/admin/footer.php?GLOBALS[message]=: Phorum 3.3.2a and below from phorum.org is vulnerable to Cross Site Scripting (XSS). See: OSVDB-11144 + /Page/1,10966,,00.html?var=: Vignette server is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. + /netutils/whodata.stm?sitename=: Sambar Server default script is vulnerable to Cross Site Scripting (XSS). See: OSVDB-5106 + /nav/cList.php?root=: OpenBB 1.0.0 RC3 is vulnerable to Cross Site Scripting (XSS). + /msadm/user/login.php3?account_name=\">: The Sendmail Server Site User login is vulnerable to Cross Site Scripting (XSS). + /msadm/site/index.php3?authid=\">: The Sendmail Server Site Administrator Login is vulnerable to Cross Site Scripting (XSS). + /msadm/domain/index.php3?account_name=\">: The Sendmail Server Site Domain Administrator login is vulnerable to Cross Site Scripting (XSS). + /modules/Submit/index.php?op=pre&title=: Basit cms 1.0 is vulnerable to Cross Site Scripting (XSS). See: OSVDB-50539 + /modules/Forums/bb_smilies.php?site_font=}-->: PHP-Nuke 6.0 is vulnerable to Cross Site Scripting (XSS). + /modules/Forums/bb_smilies.php?name=: PHP-Nuke 6.0 is vulnerable to Cross Site Scripting (XSS). + /modules/Forums/bb_smilies.php?Default_Theme=: PHP-Nuke 6.0 is vulnerable to Cross Site Scripting (XSS). + /modules/Forums/bb_smilies.php?bgcolor1=\">: PHP-Nuke 6.0 is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=Xforum&file=member&action=viewpro&member=: The XForum (PHP-Nuke Add-on module) is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=Xforum&file=&fid=2: The XForum (PHP-Nuke Add-on module) is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=Wiki&file=index&pagename=: Wiki PostNuke Module is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1070 + /modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink&cid=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=WebChat&file=index&roomid=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=Members_List&file=index&letter=: This install of PHP-Nuke's modules.php is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=Guestbook&file=index&entry=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). + /modules.php?op=modload&name=DMOZGateway&file=index&topic=: The DMOZGateway (PHP-Nuke Add-on module) is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1523 + /modules.php?name=Your_Account&op=userinfo&username=bla: Francisco Burzi PHP-Nuke 5.6, 6.0, 6.5 RC1/RC2/RC3, 6.5 is vulnerable to Cross Site Scripting (XSS). + /modules.php?name=Your_Account&op=userinfo&uname=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). + /modules.php?name=Surveys&pollID=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). + /modules.php?name=Stories_Archive&sa=show_month&year=&month=3&month_l=test: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2020 + /modules.php?name=Stories_Archive&sa=show_month&year=2002&month=03&month_l=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2020 + /modules.php?name=Downloads&d_op=viewdownloaddetails&lid=02&ttitle=: This install of PHP-Nuke is vulnerable to Cross Site Scripting (XSS). See: OSVDB-5914 + /modules.php?name=Classifieds&op=ViewAds&id_subcatg=75&id_catg=: The PHP-Nuke forum is vulnerable to Cross Site Scripting (XSS). + /megabook/admin.cgi?login=: Megabook guestbook is vulnerable to Cross Site Scripting (XSS). See: OSVDB-3201 + /launch.jsp?NFuse_Application=: NFuse is vulnerable to cross site scripting (XSS) in the GetLastError function. Upgrade to the latest version. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0504 + /launch.asp?NFuse_Application=: NFuse is vulnerable to cross site scripting (XSS) in the GetLastError function. Upgrade to the latest version. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0504 + /isapi/testisa.dll?check1=: Sambar Server default script is vulnerable to Cross Site Scripting (XSS). See: OSVDB-5803 + /index.php?file=Liens&op=\">: Nuked-klan 1.3b is vulnerable to Cross Site Scripting (XSS). See: OSVDB-50552 + /index.php?action=storenew&username=: SunShop is vulnerable to Cross Site Scripting (XSS) in the signup page. + /index.php?action=search&searchFor=\">: MiniBB is vulnerable to Cross Site Scripting (XSS). See: http://www.minibb.net + /index.php/content/search/?SectionID=3&SearchText=: eZ publish v3 and prior allow Cross Site Scripting (XSS). + /index.php/content/advancedsearch/?SearchText=&PhraseSearchText=&SearchContentClassID=-1&SearchSectionID=-1&SearchDate=-1&SearchButton=Search: eZ publish v3 and prior allow Cross Site Scripting (XSS). + /html/partner.php?mainfile=anything&Default_Theme=': myphpnuke version 1.8.8_final_7 is vulnerable to Cross Site Scripting (XSS). + /html/chatheader.php?mainfile=anything&Default_Theme=': myphpnuke version 1.8.8_final_7 is vulnerable to Cross Site Scripting (XSS). + /html/cgi-bin/cgicso?query=: This CGI is vulnerable to Cross Site Scripting (XSS). + /gallery/search.php?searchstring=: Gallery 1.3.4 and below is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. http://www.securityfocus.com/bid/8288. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0614 + /friend.php?op=SiteSent&fname=: This version of PHP-Nuke's friend.php is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1524 + /forums/index.php?board=;action=login2&user=USERNAME&cookielength=120&passwrd=PASSWORD: YaBB is vulnerable to Cross Site Scripting (XSS) in the password field of the login page. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6133,http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1845 + /error/500error.jsp?et=1;: Macromedia Sitespring 1.2.0(277.1) on Windows 2000 is vulnerable to Cross Site Scripting (XSS) in the error pages. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1027 + /download.php?sortby=&dcategory=: This version of PHP-Nuke's download.php is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. + /comments.php?subject=&comment=&pid=0&sid=0&mode=&order=&thold=op=Preview: This version of PHP-Nuke's comments.php is vulnerable to Cross Site Scripting (XSS). Upgrade to the latest version. + /cleartrust/ct_logon.asp?CTLoginErrorMsg=: RSA ClearTrust allows Cross Site Scripting (XSS). See: OSVDB-50619 + /cgi-local/cgiemail-1.6/cgicso?query=: This CGI is vulnerable to Cross Site Scripting (XSS). See: https://vulners.com/osvdb/OSVDB:651 + /cgi-local/cgiemail-1.4/cgicso?query=: This CGI is vulnerable to Cross Site Scripting (XSS). See: https://vulners.com/osvdb/OSVDB:651 + /calendar.php?year=&month=03&day=05: DCP-Portal v5.3.1 is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1536 + /ca000007.pl?ACTION=SHOWCART&REFPAGE=\">: Actinic E-Commerce services is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1732 + /ca000001.pl?ACTION=SHOWCART&hop=\">&PATH=acatalog%2f: Actinic E-Commerce services is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1732 + /article.cfm?id=1': With malformed URLs, ColdFusion is vulnerable to Cross Site Scripting (XSS). + /apps/web/vs_diag.cgi?server=: Zeus 4.2r2 (webadmin-4.2r2) is vulnerable to Cross Site Scripting (XSS). See: https://www.mail-archive.com/bugtraq@securityfocus.com/msg11627.html + /addressbook/index.php?surname=: Phpgroupware 0.9.14.003 is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0504 + /addressbook/index.php?name=: Phpgroupware 0.9.14.003 is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0504 + /add.php3?url=ja&adurl=javascript:: Admanager 1.1 is vulnerable to Cross Site Scripting (XSS). See: https://seclists.org/vuln-dev/2002/Apr/270 + /a?: Server is vulnerable to Cross Site Scripting (XSS) in the error message if code is passed in the query-string. This may be a Null HTTPd server. + /?mod=&op=browse: Sage 1.0b3 is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1243 + /mailman/admin/ml-name?\">;: Mailman is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0855 + /affich.php?image=: GPhotos index.php rep Variable XSS. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2397 + /diapo.php?rep=: GPhotos index.php rep Variable XSS. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2397 + /index.php?rep=: GPhotos index.php rep Variable XSS. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2397 + /fcgi-bin/echo?foo=: Fast-CGI has two default CGI programs (echo.exe/echo2.exe) vulnerable to Cross Site Scripting (XSS). See: OSVDB-700 + /fcgi-bin/echo2?foo=: Fast-CGI has two default CGI programs (echo.exe/echo2.exe) vulnerable to Cross Site Scripting (XSS). See: OSVDB-3954 + /fcgi-bin/echo.exe?foo=: Fast-CGI has two default CGI programs (echo.exe/echo2.exe) vulnerable to Cross Site Scripting (XSS). See: OSVDB-700 + /fcgi-bin/echo2.exe?foo=: Fast-CGI has two default CGI programs (echo.exe/echo2.exe) vulnerable to Cross Site Scripting (XSS). See: OSVDB-3954 + /apps/web/index.fcgi?servers=§ion=: Zeus Admin server 4.1r2 is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1785 + /index.php?err=3&email=\">: MySQL Eventum is vulnerable to XSS in the email field. See: OSVDB-12606 + /forgot_password.php?email=\">: MySQL Eventum is vulnerable to XSS in the email field. See: OSVDB-12607 + /bugs/index.php?err=3&email=\">: MySQL Eventum is vulnerable to XSS in the email field. See: OSVDB-12606 + /bugs/forgot_password.php?email=\">: MySQL Eventum is vulnerable to XSS in the email field. See: OSVDB-12607 + /eventum/index.php?err=3&email=\">: MySQL Eventum is vulnerable to XSS in the email field. See: OSVDB-12606 + /eventum/forgot_password.php?email=\">: MySQL Eventum is vulnerable to XSS in the email field. See: OSVDB-12607 + /login/sm_login_screen.php?error=\">: SPHERA HostingDirector and Final User (VDS) Control Panel 1-3 are vulnerable to Cross Site Scripting (XSS). See: OSVDB-2562 + /login/sm_login_screen.php?uid=\">: SPHERA HostingDirector and Final User (VDS) Control Panel 1-3 are vulnerable to Cross Site Scripting (XSS). See: OSVDB-2562 + /SPHERA/login/sm_login_screen.php?error=\">: SPHERA HostingDirector and Final User (VDS) Control Panel 1-3 are vulnerable to Cross Site Scripting (XSS). See: OSVDB-2562 + /SPHERA/login/sm_login_screen.php?uid=\">: SPHERA HostingDirector and Final User (VDS) Control Panel 1-3 are vulnerable to Cross Site Scripting (XSS). See: OSVDB-2562 + /index.php?vo=\">: Ralusp Sympoll 1.5 is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1175 + /shopping/shopdisplayproducts.asp?id=1&cat=: VP-ASP prior to 4.50 are vulnerable to XSS attacks. See: https://seclists.org/bugtraq/2004/Jun/210 + /shopdisplayproducts.asp?id=1&cat=: VP-ASP Shopping Cart 4.x shopdisplayproducts.asp XSS. See: https://seclists.org/bugtraq/2004/Jun/210 + /showmail.pl?Folder=: @Mail WebMail 3.52 contains an XSS in the showmail.pl file. See: OSVDB-2950 + /forum/memberlist.php?s=23c37cf1af5d2ad05f49361b0407ad9e&what=\">\": Vbulletin 2.2.9 and below are vulnerable to Cross Site Scripting (XSS). See: OSVDB-3280 + /firewall/policy/dlg?q=-1&fzone=t>&tzone=dmz: Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: https://securitytracker.com/id/1008158 + /firewall/policy/policy?fzone=internal&tzone=dmz1: Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: https://securitytracker.com/id/1008158 + /antispam/listdel?file=blacklist&name=b&startline=0: Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: OSVDB-3295 + /antispam/listdel?file=whitelist&name=a&startline=0(naturally): Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: OSVDB-3295 + /theme1/selector?button=status,monitor,session&button_url=/system/status/status,/system/status/moniter\">,/system/status/session: Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: OSVDB-3296 + /theme1/selector?button=status,monitor,session&button_url=/system/status/status\">,/system/status/moniter,/system/status/session: Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: OSVDB-3296 + /theme1/selector?button=status,monitor,session\">&button_url=/system/status/status,/system/status/moniter,/system/status/session: Fortigate firewall 2.50 and prior contains several XSS vulnerabilities in various administrative pages. See: OSVDB-3296 + /examplesWebApp/InteractiveQuery.jsp?person=: BEA WebLogic 8.1 and below are vulnerable to Cross Site Scripting (XSS) in example code. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0624 + /sgdynamo.exe?HTNAME=: Ecometry's SGDynamo is vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0375 + /aktivate/cgi-bin/catgy.cgi?key=0&cartname=axa200135022551089&desc=: Aktivate Shopping Cart 1.03 and lower are vulnerable to Cross Site Scripting (XSS). See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1212 + /webcalendar/colors.php?color=: Webcalendar 0.9.42 and below are vulnerable to Cross Site Scripting (XSS). See: OSVDB-3632 + /webcalendar/week.php?user=\">: Webcalendar 0.9.42 and below are vulnerable to Cross Site Scripting (XSS). See: OSVDB-3633 + /debug/dbg?host==: The TCLHttpd 3.4.2 server is vulnerable to Cross Site Scripting (XSS) in debug scripts. See: OSVDB-3762 + /debug/echo?name=: The TCLHttpd 3.4.2 server is vulnerable to Cross Site Scripting (XSS) in debug scripts. See: OSVDB-3762 + /debug/errorInfo?title===: The TCLHttpd 3.4.2 server is vulnerable to Cross Site Scripting (XSS) in debug scripts. See: OSVDB-3762 + /debug/showproc?proc===: The TCLHttpd 3.4.2 server is vulnerable to Cross Site Scripting (XSS) in debug scripts. See: OSVDB-3762 + /addressbook.php?\">