Found
Duration
Date
IP
- Nikto v2.6.0 --------------------------------------------------------------------------- + Target IP: 64.92.125.18 + Target Hostname: shopmonogramfoods.com + Target Port: 80 + Platform: Unknown + Start Time: 2026-10-21 20:03:57 (GMT0) --------------------------------------------------------------------------- + Server: Apache + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [999967] /: Web Server returns a valid response with junk HTTP methods which may cause false positives. + [999972] /: DEBUG HTTP verb may show server debugging information. See: https://docs.microsoft.com/en-us/visualstudio/debugger/how-to-enable-debugging-for-aspnet-applications?view=vs-2017 + [000016] /kboard/: KBoard Forum 0.3.0 and prior have a security problem in forum_edit_post.php, forum_post.php and forum_reply.php. + [000018] /splashAdmin.php: Cobalt Qube 3 admin is running. This may have multiple security problems which could not be tested remotely. See: https://seclists.org/bugtraq/2002/Jul/262 + [000019] /ssdefs/: Siteseed pre 1.4.2 has 'major' security problems. + [000020] /sshome/: Siteseed pre 1.4.2 has 'major' security problems. + [000021] /tiki/: Tiki 1.7.2 and previous allowed restricted Wiki pages to be viewed via a 'URL trick'. Default login/pass could be admin/admin. + [000022] /tiki/tiki-install.php: Tiki 1.7.2 and previous allowed restricted Wiki pages to be viewed via a 'URL trick'. Default login/pass could be admin/admin. + [000023] /scripts/samples/details.idc: NT ODBC Remote Compromise. See: http://attrition.org/security/advisory/individual/rfp/rfp.9901.nt_odbc + [000024] /_vti_bin/shtml.exe: Attackers may be able to crash FrontPage by requesting a DOS device, like shtml.exe/aux.htm -- a DoS was not attempted. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0709 + [000038] /~root/: Allowed to browse root's home directory. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1013 + [000039] /cgi-bin/wrap: Allows viewing of directories. + [000040] /forums//admin/config.php: PHP Config file may contain database IDs and passwords. + [000040] /forums//adm/config.php: PHP Config file may contain database IDs and passwords. + [000040] /forums//administrator/config.php: PHP Config file may contain database IDs and passwords. + [000041] /forums/config.php: PHP Config file may contain database IDs and passwords. + [000043] /guestbook/guestbookdat: PHP-Gastebuch 1.60 Beta reveals sensitive information about its configuration. + [000044] /guestbook/pwd: PHP-Gastebuch 1.60 Beta reveals the md5 hash of the admin password. + [000045] /help/: Help directory should not be accessible. + [000046] /hola/admin/cms/htmltags.php?datei=./sec/data.php: hola-cms-1.2.9-10 may reveal the administrator ID and password. See: https://vulners.com/exploitdb/EDB-ID:23027 + [000054] /global.inc: PHP-Survey's include file should not be available via the web. Configure the web server to ignore .inc files or change this to global.inc.php. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0614 + [000057] /inc/common.load.php: Bookmark4U v1.8.3 include files are not protected and may contain remote source injection by using the 'prefix' variable. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1253 + Scan terminated: 3 errors and 27 items reported on the remote host + End Time: 2026-10-21 20:05:36 (GMT0) (99 seconds) --------------------------------------------------------------------------- + 1 host(s) tested