APPSCAN测试策略

1、APPSCANAPPSCAN测试策略测试策略作者：amxkingQQ： 3633526名称：定制模板测试策略描述:This policy includes all Honkwin tests except port listener tests.测试(11483-58480 种):名称严重性登录锚误消息凭证枚举HighIIS localstart.asp 可能的蛮力High不充分帐户封锁High可预测的登录凭证HighphpMyAdmin控制台远程数据库管理HighNetscape Administration Server 密码检索HighHTTP PUT方法站点篡改HighLotus Do

2、mino Web服务器文件检索HighMacromedia JRun Administration Server 认证旁路HighMacromedia Dreamweaver远程数据库未授权的访问HighNetscape Enterprise Server/Sun ONE未授权的管理特权和拒绝服务HighASP.NET表单认证旁路High使用SQL注入的认证旁路HighEWS (Excite for Web Servers)特权升级HighTektronix PhaserLink Webserver 远程管理认证旁路HighJBoss Web管理控制台认证旁路HighJBoss Java管理扩

3、展控制台认证旁路High名称严重性Macromedia ColdFusion 弱会话 CookieHighApache JServ弱令牌算法High未授权的PL/SQL管理页面访问Medium通过Cookie操纵的可能的垂宜特权升级MediumMicrosoft Frontpage Server Extensions 管理界面MediumBEA WebLogic管理界面MediumApache Tomcat Context Administration Tool 无特权访问MediumLotus Domino Web Administration 模板访问MediumCobalt RaQ特权升

4、级MediumOracle Application Server 管理界面MediumBanner Rotating 01 特权升级MediumAccount Manager CGI远程密码更改MediumLyris List Manager访问控制旁路MediumGWScripts News Publisher 访问控制旁路Medium新闻更新访问控制旁路MediumWWWboard.pl密码检素MediumPowerscrip恰 PlusMail 密码更改MediumSubscribe Me Mailing List Manager 特权升级MediumPCCS MySQL数据库管理工具骨

5、理员密码泄露Medium应用流程Subversion所用的Webevent管理权MediumMicrosoft FrontPage Extensions 站点篡改Medium跨站点请求伪造Medium名称严重性Microsoft IIS Hit Highlighting 认证旁路Medium永久Cookie包含敏感的会话信息High注销后会话未失效High外部会话标识实施High会话标识未更新High会话定置HighHTTP响应分割Medium启用了不安全的HTTP方法Medium通过URL重定向钓鱼Medium通过框架钓鱼MediumSAP Web Application Server HT

6、TP 响应注入MediumOracle 10g HTTP 响应分割Medium链接注入（便于跨站请求伪造）MediumphpPgAdmin redirect.php URL 重定向MediumWebDAV MKCOL方法站点篡改Medium存储的响应分割Medium通过Flash钓鱼MediumFlash中的不安全直接对象引用MediumMicrosoft Outlook Web Access for Exchange URL 重定向MediumWoltLab Burning Board dereferrer.php URL 重定向Medium跨站点脚本编制High基于DOM的跨站点脚本编制H

7、igh名称严重性主机允许从任何域进行flash访问High存储的跨站点脚本编制HighOracle Application Server PL/SQL 跨站点脚本编制HighMicrosoft .NET Server跨站点脚本编制HighMicrosoft SQLXML跨站点脚本编制Highht:/Dig Htsearch跨站点脚本编制HighMicrosoft Content Management Server 跨站点脚本编制HighZeus Web服务器管理界面跨站点脚本编制HighIBM WebSphere”,跨站点脚本编制HighMicrosoft Index Server .htw

8、跨站点脚本编制HighMicrosoft IIS .shtml和.stm文件跨站点脚本編制HighHTTP Referer头跨站点脚本编制HighLotus Domino图像标记跨站点脚本編制High多供应商Java Servlet容器跨站点脚本编制HighApache Tomcat Servlet异常跨站点脚本編制HighMicrosoft Exchange Server 5.5 Outlook Web Access 跨站点脚本编制HighSun Cobalt RaQ控制面板跨站点脚本编制HighOracle HTTP Server iSQL*Plus 跨站点脚本编制HighSun ONE

9、Web Server搜察跨站点脚本编制HighphpCMS跨站点脚本编制HighProfitCode PayProCart 3.0 跨站点脚本编制HighRadBids Gold v2跨站点脚本編制High名称严重性PhotoPost PHP Pro跨站点脚本编制HighESMI PayPal Storefront跨站点脚本编制Highlatek PortalApp跨站点脚本编制HighAlstraSoft EPay Pro 2.0跨站点脚本编制HighphpMyAdmin跨站点脚本编制HighBEA WebLogic Administration Console 跨站点脚本编制HighOra

10、cle Webcache 9i跨站点脚本编制HighOracle Reports Server示例脚本跨站点脚本编制HighMacromedia ColdFusion错误页面跨站点脚本编制HighModernBill跨站点脚本编制HighPostNuke readpmsg.php跨站点脚本编制HighMetaCart e-Shop跨站点脚本编制HighOpenBB跨站点脚本编制HighUltimate PHP Board (UPB)跨站点脚本编制HighTOPo 2.2跨站点脚本編制HighPostNuke RSS模块跨站点脚本编制HighHelp Center Live跨站点脚本编制High

11、Wordpress跨站点脚本编制HighSiteMinder跨站点脚本编制HighComersus购物车跨站点脚本编制HighCartwiz跨站点脚本编制HighVBZoom跨站点脚本編制High名称严重性Naxtor购物车跨站点脚本编制HighColdfusion Fusebox跨站点脚本编制HighWeb内容骨理跨站点脚本编制HighATutor跨站点脚本编制HighOracle Reports Server跨站点脚本编制HighAnnuaire 1TWO跨站点脚本编制Highi-Gallery跨站点脚本编制HighIBM Lotus Domino跨站点脚本编制HighPerlDiverm

12、odule跨站点脚本编制HighPHP Advanced Transfer Manager 跨站点脚本编制HighvBulletin跨站点脚本編制HighMicrosoft Site Server跨站点脚本编制HighPHPList Mailing List Manager 跨站点脚本编制HighApache Struts错洪消息跨站点脚本编制HighFileLister跨站点脚本編制HighPerlCal Web Calendar跨站点脚本编制HighDCForum跨站点脚本编制HighAtlant Pro跨站点脚本编制HighOracleAS Discussion Forum Portle

13、t 跨站点脚本编制HighPHP-Fusion members.php跨站点脚本编制HighOpenEdit跨站点脚本编制HighDEV Web Management System 跨站点脚本编制High名称严重性AquiferCMS-keywordH跨站点脚本编制HighphpBB-AllowHTMLn跨站点脚本编制HighFogBugz default.asp跨站点脚本编制HighInterspire Trackpoint NX index.php 跨站点脚本編制HighHelm ForgotPassword.asp 跨站点脚本编制HighFAQ-O-Matic fom.cgi跨站点脚本编

14、制HighUltimate Auction itemlist.pl 和 item.pl 跨站点脚本编制HighGTP iCommerce index.php跨站点脚本编制HighApache Geronimo cal2.jsp 跨站点脚本编制HighCubeCart index.php 和 cart.php 跨站点脚本编制HighSMBCMS站点搜索跨站点脚本編制HighMy Amazon Store Manager search.php 跨站点脚本编制HighH-Sphere psoft.hsphere.CP 跨站点脚本编制HighNuked-Klan index.php跨站点脚本编制Hig

15、hsPaiz-Nuke modules.php跨站点脚本編制HighphpBB Rlink模块rlink.php跨站点脚本编制HighMyBB search.php跨站点脚本编制HighBrowserCRM results.php跨站点脚本编制HighSoftMaker Shop resultat.asp 跨站点脚本编制HighcPanel多重跨站点脚本编制HighSiteframe search.php跨站点脚本编制HighHiveMail index.php跨站点脚本編制High名称严重性PeriBlog weblog.pl跨站点脚本编制HighSiteframe页面注释跨站点脚本编制Hi

16、ghPostNuke admin.php 和 user.php 跨站点脚本编制HighRuncmsFcT跨站点脚本编制HighCPG Dragonfly CMS跨站点脚本编制HighMyBB managegroup.php跨站点脚本编制HighV-webmail preferences.personal.php 跨站点脚本编制HighXMB u2u.php跨站点脚本编制HighmyPHPNuke跨站点脚本編制HighStoreBot 2002 Standard Edition manage.asp 跨站点脚本编制HighphpCOIN跨站点脚本編制HighphpArcadeScript跨站点脚

17、本编制HighDVGuestbook跨站点脚本编制HighGame-Panel login.php跨站点脚本编制HighMyBB多重跨站点脚本编制HighMantis跨站点脚本编制HighFlatNuke index.php跨站点脚本编制HighDRZES HMS login.php跨站点脚本编制HighSugar Sales多重跨站点脚本编制HighMyBB member.php跨站点脚本编制HighphpMyAdmin index.php跨站点脚本编制HighContrexx CMS index.php跨站点脚本編制High名称严重性ExtCalendar calendar.php 跨站点

18、脚本编制HighNoah*s Classifieds index.php 跨站点脚本编制HighVerisign*s haydn.exe CGI脚本跨站点脚本编制HighgCards index.php跨站点脚本编制HighFirepass 4100 SSL VPN my.support.php3 跨站点脚本编制HighPHP Live! statusjmage.php 跨站点脚本编制HighEas州oblog img.php跨站点脚本编制HighCoMoblog img.php跨站点脚本编制HighdotNetBB iforget.aspx跨站点脚本编制HighToast Forums to

19、ast.asp跨站点脚本编制HighHelm Web Hosting控制面板跨站点脚本编制HighrealestateZONE index.cfm 跨站点脚本编制HighcouponZONE local.cfm跨站点脚本编制HighConnect Daily多朿跨站点脚本编制HighphpCOIN多重跨站点脚本編制HighDCP-Portal index.php跨站点脚本编制HighInvision Power Board index.php 跨站点脚本编制HighMusicBox多重跨站点脚本编制HighMantis view_all_set.php 跨站点脚本编制HighWebAPP in

20、dex.cgi跨站点脚本编制HighNamazu namazu.cgi跨站点脚本编制HighlucidCMS index.php跨站点脚本編制High名称严重性SKForum多重跨站点脚本编制HighvBulletin vBug Tracker 模块 vbugs.php 跨站点脚本编制HighClaroline rqmkhtml.php跨站点脚本编制（1.7.4及其以下的版本）HighShadowed Portal页面模块load.php跨站点脚本編制HighCherokee Web Server跨站点脚本编制HighJetPhoto Server多垂跨站点脚本编制HighJupiter Co

21、ntent Manager index.php 跨站点脚本编制HighPHPWebGallery多車跨站点脚本编制HighWeb+Shop webplus.exe跨站点脚本编制HighMicrosoft FrontPage Server Extensions 跨站点脚本编制HighConfixx Pro allgemein_transfer.php 跨站点脚本编制HighSimplog login.php跨站点脚本编制HighManila多垂跨站点脚本編制HighLifeType index.php跨站点脚本编制HighMODx index.php跨站点脚本编制HighVisale多車跨站点脚

22、本编制HighBannerFarm banners.cgi跨站点脚本编制HighAWStats awstats.pl跨站点脚本编制HighNet Clubs Pro多重跨站点脚本编制HighphpLDAPadmin多重跨站点脚本編制HighxFlow index.cgi跨站点脚本编制HighW2B Online Banking跨站点脚本编制High名称严重性MKPortal pmpopup.php跨站点脚本编制（1.1 RC1及其以下的版本）HighSimplog imagelist.php跨站点脚本编制HighphpFaber TopSites index.php跨站点脚本编制（1.9.1及

23、其以下的版本）HighCalendarix yearcal.php跨站点脚本編制HighLinPHA stats_view.php跨站点脚本编制HighScry index.php跨站点脚本编制HighDCForumLite dcboard.cgi 跨站点HighInstant Photo Gallery多重跨站点脚本编制HighNextAge购物车软件index.php跨站点脚本编制HighSunShop购物车index.php跨站点脚本编制HighNeoMail neomail.pl跨站点脚本編制HighCPS popupjmage跨站点脚本编制HighPinnacle Cart inde

24、x.php跨站点脚本编制HighVirtual Hosting Control System server_day_stats.php 跨站点脚本编制HighAlbinator多重跨站点脚本編制HighCuteNews search.php跨站点脚本编制HighApache TomcafTomcat Manager跨站点脚本编制HighCyberBuild多重跨站点脚本编制HighCharts MOD for phpBB charts.php 跨站点脚本编制HighphpODP odp.php跨站点脚本编制HighConfixx ProMloginn参数跨站点脚本编制HighSphider多重

25、跨站点脚本編制High名称严重性boastMachine多重跨站点脚本编制HighApache Host头跨站点脚本编制HighApache Expect头跨站点脚本编制HighMicrosoft IIS ide文件扩展名跨站点脚本编制HighOpenCms search.html跨站点脚本编制Highphpwcms cnt6.inc.php跨站点脚本编制HighCosmicShoppingCart多重跨站点脚本编制HighASPBB perform_search.asp 跨站点脚本编制Highubb.threads index.php跨站点脚本编制HighGeeklog getimage.p

26、hp跨站点脚本编制HighTikiWiki多重跨站点脚本编制（及其以下的版本）HighASPBB多重跨站点脚本编制HighMambo多垂跨站点脚本编制（版本4.6 RC1）HighPixelpost index.php跨站点脚本编制HighKmita FAQ search.php跨站点脚本編制HighMyBB private.php跨站点脚本编制HighKAPhotoservice多垂跨站点脚本编制HighViArt Shop多重跨站点脚本编制HighFive Star Review Script多重跨站点脚本编制HighIBM WebSphere Edge Server 跨站点

27、脚本編制HighSPwiz Plus index.cfm跨站点脚本编制Highbitweaver多重跨站点脚本编制High名称严重性Confixx多重跨站点脚本编制Highe107 search.php跨站点脚本编制HighMaximus SchoolMAX icuejogin.asp 跨站点脚本编制HighSingapore index.php跨站点脚本編制HighAssoClateD index.php跨站点脚本编制HighvBulletin member.php跨站点脚本编制HighBlueDragon Server跨站点脚本编制HighNamo DeepSearch mclient.c

28、gi 跨站点脚本编制HighaeDating多重跨站点脚本编制HighmvnForumuactivatememberM 跨站点脚本编制HighH-SpherelMass Mail菜单跨站点脚本编制HighPHP phpinfoO跨站点脚本编制（V4.4.2和5.1.2）HighcPanel select.html跨站点脚本编制HighPHP iCalendar index.php跨站点脚本编制HighMoniWiki wiki.php跨站点脚本编制HighHorde多車跨站点脚本编制HighPivot多垂跨站点脚本编制HighboastMachine admin.php跨站点脚本编制Highp

29、hpFaber TopSites index.php跨站点脚本编制（2.0.9及其以下的版本）HighPhorum posting.php跨站点脚本编制HighPlesk Control Panel filemanager.php 跨站点脚本编制HighMyBB usercp.php跨站点脚本編制High名称严重性SAP Web Application Server 跨站点脚本编制HighCubeCart多重跨站点脚本编制（3.0.11及其以下的版本）HighYaBB index.php跨站点脚本编制HighOneOrZero Helpdesk index.php 跨站点脚本编制HighApa

30、che Struts内部服务器错误消息跨站点脚本编制HighMyBB admin/index.php跨站点脚本编制HighPHP-Nuke MyHeadlines 模块 modules.php 跨站点脚本编制HighMKPortal index.php跨站点脚本编制HighezConten恰Ioginreq2.php跨站点脚本编制HighMicrosoft IIS帮助文件搜索跨站点脚本编制HighSnitz Forums 2000 forum.asp 跨站点脚本编制HighMyBB genericerror.php跨站点脚本编制HigheSyndiCat目城软件search.php跨站点脚本编

31、制HighDotNetNuke Default.aspx 跨站点脚本编制HighCubeCart多重跨站点脚本編制（2.0.7及以下的版本）HighWWWthreads多重跨站点脚本编制HighSAP Internet Transaction Server 跨站点脚本编制HighosCommerce多重跨站点脚本编制HighMicrosoft Indexing Service UTF-7 跨站点脚本编制Highphplist跨站点脚本编制Highphplist index.php跨站点脚本编制HighZeus vs_diag.cgi跨站点脚本編制High名称严重性Cobalt RaQ跨站点脚本

32、编制HighOracle Configurator跨站点脚本编制HighOracle Application Server 跨站点脚本编制HighOracle Application Server welcomeuser.jsp 跨站点脚本編制HighMambo査询跨站点脚本编制HighMAXdev MD-Pro user.php跨站点脚本编制HighTikiWiki tiki-featured_link.php 跨站点脚本编制HighMicrosoft Terminal Services Advanced Client (TSAC) ActiveX 控件跨站点脚本编制HighHelm Web

33、 Hosting Control Panel多重跨站点脚本编制HighvBulletin index.php跨站点脚本编制HighBLOG:CMSIist.php跨站点脚本编制HighcPanel dnslook.html跨站点脚本编制HighCuteNews多重跨站点脚本編制HighIBM WebSphere 500内部服务器错误页面跨站点脚本编制HighPlesk多重跨站点脚本编制Highb2evolution多重跨站点脚本编制HighPHPNews linkjemp.php跨站点脚本編制HighosCommerce4-pagen参数跨站点脚本编制HighGoogle Search App

34、liance UTF-7 跨站点脚本编制HighphpMyAdmin sql.php跨站点脚本編制HighKayako Supportsuite index.php 跨站点脚本编制HighShopSite购物车多重registration.cgi跨站点脚本編制High名称严重性Adobe ColdFusion MX跨站点脚本编制HighHelm多重跨站点脚本编制HighvBulletin Admin Control Panel index.php 跨站点脚本编制HighCuteNews“result参数跨站点脚本编制Highopentaps keywordsearch跨站点脚本编制HighPH

35、P Live! message_box.php 跨站点脚本编制HighWordPress templates.php 跨站点脚本编制HighAShop购物车多重跨站点脚本编制HighCMS Made Simple多重跨站点脚本編制HighOracle Portal 10g跨站点脚本编制HighiPlanetHNS-max-recordsn 跨站点脚本編制HighMovable Type注释跨站点脚本编制HighQuick.Cart 和 Fastilo index.php 跨站点脚本编制HighIndexu多重跨站点脚本编制HighlnstantForum.NET多里跨站点脚本編制Highsab

36、ros.us index.php跨站点脚本编制HighOracle Application Serverrwcgi60M跨站点脚本编制HighAdobe ColdFusion User-Agent 头跨站点脚本编制HighWordPress多重跨站点脚本编制HighMediaWiki AJAX UTF-7跨站点脚本编制HighMyCalendar index.php跨站点脚本编制HighBuilt2go News Manager Blog多重跨站点脚本編制High名称严重性Phorum admin.php跨站点脚本编制（5.1.19及其以下的版本）HighHorde语言选择跨站点脚本編制Hig

37、hOracle Portal PORTALwwv_main.render_warning_screen 跨站点脚本编制HighOracle 10g动态监视服务跨站点脚本編制Highw-agora多重跨站点脚本编制HighPHP-Nuke modules.php跨站点脚本编制HighWordPress“PHP_SELF跨站点脚本编制HighPHP phpinfoO跨站点脚本编制（版本4.4.3-4.4.6）HighDeskPRO login.php跨站点脚本编制HighPunBB misc.php跨站点脚本编制Highchcounter跨站点脚本编制HighMephisto跨站点脚本编制High

38、PHP-Nuke vWar模块跨站点脚本编制HighMicrosoft ASP.NET 跨站点脚本编制（Cookie）HighPhorum admin.php跨站点脚本編制（5.1.20及其以下的版本）HighKayako eSupport index.php 跨站点脚本编制HighAdvanced Guestbook picture.php 跨站点脚本编制HighAdobe RoboHelp跨站点脚本编制HighWordPress Redoable主题index.php跨站点脚本编制HighTomcat样本站点跨站点脚本编制HighHLstats hlstats.php跨站点脚本编制High

39、boastMachine index.php跨站点脚本编制High名称严重性路径中的phpPgAdmin跨站点脚本编制HighCisco Unified Communications Manager 跨站点脚本编制HighWebStudio多重跨站点脚本编制HighPHP Live!多重跨站点脚本編制HighBBpress bb-login.php跨站点脚本编制HighBeehive Forum links.php跨站点脚本编制HighApache Tomcat Accept-Language 头跨站点脚本编制HighApache Tomcat Manager跨站点脚本编制HighApache

40、 Tomcat JSP示例跨站点脚本编制HighApache MyFaces Tomahawk JSF Framework 跨站点脚本编制HighFusetalk多重跨站点脚本編制HighCalendarix多重跨站点脚本编制HigheTicket open.php跨站点脚本编制HighMoodle index.php跨站点脚本编制High路径中的Oracle Rapid Install跨站点脚本編制HighactiveWeb contentserver 跨站点脚本编制HighSAP Internet Graphics Server 跨站点脚本編制HighProventia GX5108和GX

41、5008跨站点脚本编制HighUseBB多重跨站点脚本编制HighWordPress upload.php跨站点脚本编制HighApache Tomcat Send Mail示例跨站点脚本编制HighApache Tomcat Host Manage广aliases跨站点脚本編制High名称严重性路径中的WordPress Pool主题跨站点脚本编制HighPhpGedView login.php跨站点脚本编制HighApache Tomcat cal2.jsp跨站点脚本编制HighphpMyQuote index.php跨站点脚本编制HighCitrix Metaframe XP跨站点脚本编

42、制HighCoppermine Photo Gallery mode.php 跨站点脚本编制HighblgMail hilfe.php跨站点脚本编制HighPhp-Stats tracking.php跨站点脚本编制HighSimpNews多重跨站点脚本编制HighSimpGB多复跨站点脚本编制HighJSPWiki多重跨站点脚本編制HighGoogle Mini SearchTe”跨站点脚本编制HighMicrosoft SharePoint跨站点脚本编制HighphpMyAdmin setup.php跨站点脚本编制HighJoomla! index.php跨站点脚本编制HighGoogle

43、Urchin跨站点脚本编制HighDNews dnewsweb.exe跨站点脚本编制HighphpMyAdmin server_status.php 跨站点脚本编制HighVanilla sortcategories.php SQL 注入HighSimple PHP Blog comment_add_cgi.php 跨站点脚本编制HighTikiWiki多重跨站点脚本编制（及其以下的版本）HighWordPress edit-post-rows.php 跨站点脚本編制High名称严重性SAXON menu.php跨站点脚本编制HighOmnistar Live kb.php跨站点

44、脚本编制HighAutoIndex index.php跨站点脚本编制HighLiferay Portal Enterprise 跨站点脚本编制HighvBTube （用于vBulletin的模块）vBTube.php跨站点脚本编制HighCitrix NetScaler Web Management 跨站点脚本编制High路径中的bitweaver多臺跨站点脚本编制HighwebSPELL多重跨站点脚本编制HighMambo index.php多重跨站点脚本编制HighLimbo admin.php跨站点脚本编制High路径中的RunCms index.php跨站点脚本编制HighGWExtr

45、anet多审跨站点脚本编制HighFirePass 4100 SSL VPN多重跨站点脚本编制HighwebSPELL index.php跨站点脚本编制HighPhpMyChat多重跨站点脚本編制HighphpWebSite index.php跨站点脚本编制HighSnitz Forums 2000多垂跨站点脚本编制HigheTicket view.php跨站点脚本编制HighMerak Mail Server index.html 跨站点脚本编制HighBLOG:CMS多重跨站点脚本编制HighMoodle install.php跨站点脚本编制HighF5 BIG-IP Web管理列表搜索跨

46、站点脚本编制High名称严重性PHP iCalendar多乘跨站点脚本编制HighMegaBBS ASP Forum跨站点脚本編制HighClever Copy gallery.php跨站点脚本编制HighWordPress Permalinks Migration 插件跨站点脚本編制HighF5 BIG-IP Application Security Manager rep request.php 跨站点脚本编制HighMambo connector.php跨站点脚本编制HighSimple Forum forum.php跨站点脚本编制HighCoppermine Photo Gallery

47、 showdoc.php 跨站点脚本编制HigheTicket index.php跨站点脚本编制HighNucleus action.php跨站点脚本编制HighOpenBSD bgplg跨站点脚本编制HighWebmin 和 Usermin webmin_search.cgi 跨站点脚本编制HighAMFPHP details.php跨站点脚本編制HighSun Java Web Server Expect头跨站点脚本编制HighCacti多里跨站点脚本編制HighEtomite index.php跨站点脚本编制HighJSPWiki Edit.jsp跨站点脚本编制HighDokeos多重跨

48、站点脚本编制HighSophos Email Appliance多重跨站点脚本编制HighBEA Plumtree Foundation 和 AquaLogic Interaction 跨站点脚本编制HighJuniper Networks Secure Access 2000 rdremediate.cgi 跨站点脚本编制HighCheckpoint VPN-1 UTM Edge 跨站点脚本编制High名称严重性WordPress invites.php跨站点脚本编制HighIBM Lotus QuickPlace Main.nsf 跨站点脚本編制HighCS-Cart index.php跨

49、站点脚本编制HighIBM Rational ClearQuest多重跨站点脚本编制High路径中的cPanel跨站点脚本编制High路径中的Swiki跨站点脚本编制HighIBM HTTP Server Expect头跨站点脚本编制HighBusinessobjects XI登录跨站点脚本编制JHighHorde Webmail addevent.php 跨站点脚本编制HighRSA Authentication Agent 跨站点脚本编制HighminiBB多重跨站点脚本編制HighLifeType admin.php跨站点脚本编制（版本1.2.7）High路径中的Apache Tomca

50、t跨站点脚本编制HighLifeType admin.php跨站点脚本编制（版本1.2.8）HighZyWALL Referer头跨站点脚本编制HighSAP Internet Transaction Server wgate.dll 跨站点脚本编制HighSphider search.php跨站点脚本编制HighCisco Building Broadband Service Manager AccessCodeStart.asp 跨站点脚本编制HighAppServ index.php跨站点脚本编制HighZeroBoard多重跨站点脚本編制HighJEUS url.jsp跨站点脚本编制H

51、ighMantis return_dynamic_filters.php 跨站点脚本编制High名称严重性路径中的SAP Web Application Server跨站点脚本编制HighBMForum多重跨站点脚本编制HighBarracuda Spam Firewall ldap_test.cgi 跨站点脚本编制HighCalcium calcium40.pl跨站点脚本编制High路径中的Xerox DocuShare多熏跨站点脚本编制HighApache Tomcat Host Manager“name跨站点脚本编制HighF5 FirePass SSL VPN多重跨站点脚本编制High

52、yblog多車跨站点脚本编制HighGlassFish Administration Console 跨站点脚本编制HighAdobe Flex基于DOM的跨站点脚本编制HighvBulletin多重跨站点脚本编制High通过Flash进行的跨站点脚本编制High跨站点Flash编制HighClaroline多重跨站点脚本编制HighWeb Wiz Forum admin_category_details.asp 跨站点脚本编制HighClaroline rqmkhtml.php 跨站点脚本编制（版本 1.8.9）HighPligg user.php跨站点脚本编制HighXampp Linux

53、跨站点脚本编制HighPluck多重跨站点脚本编制HighKayako Supportsuite跨站点脚本编制HighOpenfire login.jsp跨站点脚本编制HighAWStats URL跨站点脚本編制High名称严重性Vanilla people.php跨站点脚本编制HighPHPizabi index.php跨站点脚本編制HighMambo多重跨站点脚本编制（版本4.6.2）HighMail WebMail多重跨站点脚本编制Highvtiger CRM index.php跨站点脚本编制HighFreeway eCommerce searchjinks.php 跨站点脚本编制Hig

54、hPhpWebGallery isadmin.inc.php 跨站点脚本编制High参数中的Quick.Cart跨站点脚本编制HighH-Sphere login.php跨站点脚本编制Highxt:Commerce advanced_search_result.php 跨站点脚本编制High路径中的Datalife Engine跨站点脚本編制HighWordPress MU wpmu-blogs.php 跨站点脚本编制HighBlue Coat ICAP Patience Page 跨站点脚本编制HighH-Sphere actions.php跨站点脚本编制HighWordPress WP C

55、omment Remix插件跨站点脚本編制HighElxis多重跨站点脚本编制High路径中的WebSVN跨站点脚本编制HighphpMyAdmin pmd_pdf.php跨站点脚本编制HighMyBB moderation.php跨站点脚本编制HighcPanel autoinstall4imagesgalleryupgrade.php 跨站点脚本編制HighIBM Metrica跨站点脚本编制HighSun Java System Identity Manager 跨站点脚本编制High名称严重性Q-Shop search.asp跨站点脚本编制HighiNet Orkut Clone pr

56、ofile_social.php 跨站点脚本编制HighTWiki多重跨站点脚本编制HighCisco IOS HTTP Server跨站点脚本编制HighTmax Soft JEUS url.jsp跨站点脚本编制High使用恶意RSS订阅源包含的跨站点脚本編制HighOracle Application Server login.jsp 跨站点脚本编制HighOracle Forms ifcgi60.exe 跨站点脚本编制HighFotoWeb多重跨站点脚本编制HighIBM WebSphere Application Server管理控制台多重跨站点脚本编制HighSun Java Sys

57、tem Calendar Server多重跨站点脚本编制HighOracle Application Server 10g login.jsp 跨站点脚本编制High针对文件 FilepathLogin.html 跨站点脚本编制的 IBM Tivoli Continuous Data ProtectionHighApache mod_perl MApache:StatusH / MApache2:Statusn 跨站点脚本编制HighJavaBB pm.externalSend.jbb 跨站点脚本编制HighJavaBB memberjist.jbb跨站点脚本编制HighPligg login

58、.php跨站点脚本编制High路径中的TikiWiki CMS/Groupware多重跨站点脚本编制HighIBM BladeCenter Advanced Management Module 跨站点脚本编制High路径中的Apache Geronimo跨站点脚本編制HighNovell Teaming跨站点脚本编制HighWoltLab Burning Board dereferrer.php 跨站点脚本編制High名称严重性Novell Open Enterprise Server QuickFinder 多重跨站点脚本编制HighVirtueMart Multiple Cross-Sit

59、e ScriptingHighMoinMoin Cross-Site ScriptingHighMKPortal handlerjmage.php Cross-Site ScriptingHighMicrosoft IIS .printer 缓冲区溢出HighPHP Multipart/Form-Data 远程命令执行High长Cookie值缓冲区溢出HighApache Web Server 块编码HighIBM WebSphere拒绝服务HighOpenSSL格式错课的客户机密钥缓冲区溢出HighOracle iSQLTIus缓冲区溢出HighMicrosoft IIS 5.0 on Wi

60、n2k WebDAV 缓冲区溢出High应用程序路径溢出HighApache mod_ntlm溢出远程命令执行High参数值溢出HighNetscape Enterprise Server GET 请求缓冲区溢出HighMicrosoft Frontpage Server Extensions 缓冲区溢出HighMicrosoft PhoneBook Server 缓冲区溢出HighMicrosoft IIS格式错洪的.HTR请求拒绝服务HighBEA WebLogic Server两点缓冲区溢出HighApache Web Server HTTP 请求拒绝服务HighLotus Domino