- Nikto --------------------------------------------------------------------------- + Multiple IPs found: 151.101.66.49, 151.101.2.49, 151.101.130.49, 151.101.194.49 + Target IP: 151.101.66.49 + Target Hostname: www.staging.zeit.de + Target Port: 80 + Start Time: 2024-09-13 17:22:31 (GMT-4) --------------------------------------------------------------------------- + Server: No banner retrieved + Root page / redirects to: https://www.staging.zeit.de/ + No CGI Directories found (use '-C all' to force check all possible dirs) + /: Retrieved via header: 1.1 varnish. + /: Retrieved x-served-by header: cache-lga21973-LGA. + /: Uncommon header 'x-served-by' found, with contents: cache-lga21973-LGA. + /modules.php?letter=%22%3E%3Cimg%20src=javascript:alert(document.cookie);%3E&op=modload&name=Members_List&file=index: Post Nuke 0.7.2.3-Phoenix is vulnerable to Cross Site Scripting (XSS). + 8157 requests: 0 error(s) and 4 item(s) reported on remote host + End Time: 2024-09-13 17:22:49 (GMT-4) (18 seconds) --------------------------------------------------------------------------- + 1 host(s) tested