Qa Summary

HPE Security WebInspect
QA Summary
Web Application Assessment Report
Scan Name:
Policy:
Scan Date:
Scan Version:
Scan Type:
Site: http://zero.webappsecurity.com/
Standard
10/10/2016 1:19:47 PM
16.10.463.10
Site
Crawl Sessions:
Vulnerabilities:
Scan Duration:
Client:
437
104
21 minutes : 27 seconds
FF
Server: http://zero.webappsecurity.com:80
Broken Links
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:
80/resources/js/bootstrap.min.js
- http://zero.webappsecurity.com:80/resources/js/Bootstrap.js
80/resources/js/jquery-1.8.2.min.js
- http://zero.webappsecurity.com:80/a
80/resources/js/bootstrap-typeahead.js
- http://zero.webappsecurity.com:80/
- http://zero.webappsecurity.com:80/bank/account-activity.html
- http://zero.webappsecurity.com:80/bank/transfer-funds.html
- http://zero.webappsecurity.com:80/search.html
- http://zero.webappsecurity.com:80/link.page;
- http://zero.webappsecurity.com:80/manager/html
80/manager/conf/tomcat-users.xml
- http://zero.webappsecurity.com:80/link.page;
- http://zero.webappsecurity.com:80/link.page
- http://zero.webappsecurity.com:80/bank/money-map.html
- http://zero.webappsecurity.com:80/admin/link.page;
- http://zero.webappsecurity.com:80/admin/link.page
- http://zero.webappsecurity.com:80/admin/
- http://zero.webappsecurity.com:80/admin/link.page;
- http://zero.webappsecurity.com:80/docs/
- http://zero.webappsecurity.com:80/WEB-INF/web.xml
- http://zero.webappsecurity.com:80/online-banking.html
- http://zero.webappsecurity.com:80/bank/account-summary.html
- http://zero.webappsecurity.com:80/bank/pay-bills.html
- http://zero.webappsecurity.com:80/bank/online-statements.html
80/docs/manager-howto.html
- http://zero.webappsecurity.com:80/docs/catalina.home
- http://zero.webappsecurity.com:80/docs/introduction.
html
- http://zero.webappsecurity.com:80/docs/server.xml
- http://zero.webappsecurity.com:80/docs/manager.xml
- http://zero.webappsecurity.com:80/path/to/bar.war
- http://zero.webappsecurity.com:80/foo
Report Date: 10/10/2016
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/examples
- http://zero.webappsecurity.com:80/docs/ssl-howto.html
- http://zero.webappsecurity.com:80/usr/local/ssl/server.crt
80/docs/realm-howto.html
- http://zero.webappsecurity.com:80/docs/conf/tomcat-users.xml
80/docs/jndi-datasource-examples-howto.html
- http://zero.webappsecurity.com:80/docs/test.jsp
80/docs/jndi-resources-howto.html
- http://zero.webappsecurity.com:80/docs/tomcat-users.xml
80/docs/default-servlet.html
- http://zero.webappsecurity.com:80/docs/{$urlPath}
80/docs/mbeans-descriptor-howto.html
- http://zero.webappsecurity.com:80/docs/mbeans-descriptor.xml
80/docs/virtual-hosting-howto.html
- http://zero.webappsecurity.com:80/docs/context.xml_
- http://zero.webappsecurity.com:80/docs/localhost/manager.xml
80/docs/security-howto.html
- http://zero.webappsecurity.com:80/docs/conf/web.xml
- http://zero.webappsecurity.com:80/docs/monitoring.
html
- http://zero.webappsecurity.com:80/docs/jmx.host
80/docs/windows-service-howto.html
80/docs/CATALINA_BASE/conf/server.xml
html
- http://zero.webappsecurity.com:80/docs/jmx.port
- http://zero.webappsecurity.com:80/docs/config/index.
html
- http://zero.webappsecurity.com:80/docs/config/conf/server.xml
- http://zero.webappsecurity.com:80/docs/conf/server.xml
- http://zero.webappsecurity.com:80/docs/building.html
80/docs/res/ide-support/eclipse/java-compiler-errors-warnings.txt
80/docs/jasper-howto.html
- http://zero.webappsecurity.com:80/docs/**/*.smap
80/docs/tribes/introduction.html
80/docs/api/org/apache/catalina/tribes/package-summary.html
80/docs/appdev/deployment.html
- http://zero.webappsecurity.com:80/catalog/index.html
80/docs/appdev/processes.html
- http://zero.webappsecurity.com:80/docs/appdev/conf/server.xml
- http://zero.webappsecurity.com:80/docs/config/realm.
html
80/docs/config/conf/tomcat-users.xml
- http://zero.webappsecurity.com:80/docs/appdev/index.
html
- http://zero.webappsecurity.com:80/docs/appdev/build.xml
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/docs/web.xml
- http://zero.webappsecurity.com:80/docs/build.xml
- http://zero.webappsecurity.com:80/docs/catalina-tasks.xml
html
- http://zero.webappsecurity.com:80/docs/README.txt
80/docs/deployer-howto.html
- http://zero.webappsecurity.com:80/META-INF/context.xml
- http://zero.webappsecurity.com:80/footoo&tag=footag
- http://zero.webappsecurity.com:80/foobar
- http://zero.webappsecurity.com:80/docs/cgi-howto.html
- http://zero.webappsecurity.com:80/docs/WEB-INF/web.xml
- http://zero.webappsecurity.com:80/examples&idle=num
- http://zero.webappsecurity.com:80/docs/ssi-howto.html
- http://zero.webappsecurity.com:80/docs/filename.shtml
- http://zero.webappsecurity.com:80/usr/local/ssl/server.pem
- http://zero.webappsecurity.com:80/docs/context.xml
- http://zero.webappsecurity.com:80/docs/config/context.
html
- http://zero.webappsecurity.com:80/docs/config/web-fragment.xml
- http://zero.webappsecurity.com:80/bar
- http://zero.webappsecurity.com:80/mywebapp
80/WEB-INF/classes/SendMailServlet.java
- http://zero.webappsecurity.com:80/docs/META-INF/context.xml
- http://zero.webappsecurity.com:80/path/to/context.xslt
- http://zero.webappsecurity.com:80/docs/config/http.
html
- http://zero.webappsecurity.com:80/docs/config/HTTP/1.1
- http://zero.webappsecurity.com:80/docs/logging.html
80/docs/api/org/apache/juli/package-summary.html
80/docs/config/cluster-valve.html
- http://zero.webappsecurity.com:80/docs/config/org.apache.
catalina.ha.tcp.ReplicationValve
catalina.ha.session.JvmRouteBinderValve
catalina.ha.authenticator.ClusterSingleSignOn
html
80/docs/api/org/apache/catalina/manager/JMXProxyServlet.html
- http://zero.webappsecurity.com:80/docs/%
JAVA_HOME%/lib/tools.jar;
80/home/me/some-place-to-download-to
- http://zero.webappsecurity.com:80/docs/BUILDING.txt
- http://zero.webappsecurity.com:80/docs/output/build/bin/native/
80/docs/architecture/overview.html
80/docs/api/org/apache/catalina/Server.html
80/docs/api/org/apache/catalina/Service.html
80/docs/architecture/startup.html
- http://zero.webappsecurity.com:80/docs/architecture/server.xml
80/docs/api/org/apache/catalina/Engine.html
80/docs/api/org/apache/catalina/Host.html
80/docs/api/org/apache/catalina/core/StandardHost.html
- http://zero.webappsecurity.com:80/README.txt
- http://zero.webappsecurity.com:80/confirm.asp
- http://zero.webappsecurity.com:80/docs/config/filter.
html
- http://zero.webappsecurity.com:80/docs/config/WEB-INF/web.xml
80/docs/funcspecs/fs-jndi-realm.html
- http://zero.webappsecurity.com:80/docs/funcspecs/web.xml
80/docs/funcspecs/fs-admin-objects.html
80/docs/funcspecs/tomcat-users.xml
- http://zero.webappsecurity.com:80/docs/tagPlugins.xml
- http://zero.webappsecurity.com:80/docs/appdev/web.xml
- http://zero.webappsecurity.com:80/docs/appdev/mypage.jsp
- http://zero.webappsecurity.com:80/hello
- http://zero.webappsecurity.com:80/docs/appdev/build.
xml.txt
- http://zero.webappsecurity.com:80/docs/appdev/app.name
- http://zero.webappsecurity.com:80/docs/appdev/app.path
- http://zero.webappsecurity.com:80/${app.name
80/docs/funcspecs/fs-memory-realm.html
80/docs/funcspecs/conf/tomcat-users.xml
xml.txt
- http://zero.webappsecurity.com:80/docs/appdev/catalina.home
- http://zero.webappsecurity.com:80/docs/appdev/docs.home
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/docs/appdev/src.home
- http://zero.webappsecurity.com:80/docs/RUNNING.txt
80/docs/CATALINA_HOME/webapps/manager/METAINF/context.xml
80/docs/CATALINA_BASE/conf/Catalina/localhost/manager.xml
xml.txt
80/docs/appdev/org/apache/catalina/ant/catalina.tasks
html
80/docs/config/META-INF/context.xml
- http://zero.webappsecurity.com:80/docs/config/server.xml
- http://zero.webappsecurity.com:80/docs/config/context.xml
80/docs/config/CATALINA_BASE/conf/context.xml
- http://zero.webappsecurity.com:80/docs/config/tagPlugins.xml
- http://zero.webappsecurity.com:80/docs/config/conf/web.xml
html
- http://zero.webappsecurity.com:80/docs/config/HTTP/1.
1_and_HTTP/1.0_Support
xml.txt
- http://zero.webappsecurity.com:80/docs/appdev/compile.
classpath
80/docs/api/org/apache/catalina/Context.html
80/docs/api/org/apache/catalina/core/StandardContext.html
80/docs/architecture/startup/serverStartup.txt
80/docs/architecture/startup/server.xml
80/docs/config/systemprops.html
80/docs/config/myfolder/myresource.txt
html
80/docs/config/CATALINA_BASE/conf/web.xml
- http://zero.webappsecurity.com:80/rest;
80/docs/funcspecs/mbean-names.html
- http://zero.webappsecurity.com:80/docs/funcspecs/conf/server.
xml
80/org/apache/catalina/mbeans/mbeans-descriptors.xml
- http://zero.webappsecurity.com:80/docs/funcspecs/server.xml
xml.txt
- http://zero.webappsecurity.com:80/docs/appdev/build.home
- http://zero.webappsecurity.com:80/docs/appdev/dist.home
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/docs/appdev/manager.url
- http://zero.webappsecurity.com:80/docs/appdev/**/*.java
- http://zero.webappsecurity.com:80/docs/appdev/web.home
- http://zero.webappsecurity.com:80/index.html.old
- http://zero.webappsecurity.com:80/resources/css/bootstrap.css
- http://zero.webappsecurity.com:80/resources/js/html5.js
80/docs/architecture/startup/serverStartup.txt
- http://zero.webappsecurity.com:80/docs/architecture/startup/web.
xml
- http://zero.webappsecurity.com:80/docs/changelog.
html
- http://zero.webappsecurity.com:80/docs/Tomcat_7.0.68_
- http://zero.webappsecurity.com:80/docs/7.0.67
Parent Url
Page Url(s)
Parent Url
Page Url(s)
Parent Url
Page Url(s)
10
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/docs/web-fragment.xml
- http://zero.webappsecurity.com:80/docs/ROOT/index.jsp
- http://zero.webappsecurity.com:80/docs/antlib.xml
- http://zero.webappsecurity.com:80/docs/bin/catalina-tasks.xml
- http://zero.webappsecurity.com:80/docs/res/License.rtf
- http://zero.webappsecurity.com:80/faq.html.bak
- http://zero.webappsecurity.com:80/zero/resources/css/main.css
11
Parent Url
Page Url(s)
80/zero/resources/css/font-awesome.css
- http://zero.webappsecurity.com:80/zero/faq.html?question=1
- http://zero.webappsecurity.com:80/zero/
- http://zero.webappsecurity.com:80/zero/resources/css/bootstrap.
css
- http://zero.webappsecurity.com:80/zero/index.html
80/zero/resources/js/jquery-1.8.2.min.js
- http://zero.webappsecurity.com:80/zero/resources/js/bootstrap.
min.js
html
- http://zero.webappsecurity.com:80/docs/config/web.xml
External Links
Parent Url
Page Url(s)
- http://www.apache.org:80/licenses/LICENSE-2.0.txt
80/resources/css/font-awesome.css
- http://fortawesome.github.com:80/Font-Awesome/
- http://scripts.sil.org:80/OFL
- http://opensource.org:80/licenses/mit-license.html
- http://creativecommons.org:80/licenses/by/3.0/
- http://fortawesome.github.com:80/Font-Awesome
- http://twitter.com:80/fortaweso_me
- http://kyruus.com:80/
80/resources/css/bootstrap.min.css
- http://www.apache.org:80/licenses/LICENSE-2.0
- http://www8.hp.com:80/us/en/privacy/terms-of-use.html
- http://www8.hp.com:80/us/en/privacy/privacy.html
- https://download.hpsmartupdate.com:443/webinspect/
- https://support.fortify.com:443/
12
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/manager/html
- http://www.w3.org:80/TR/html4/strict.dtd
80/resources/js/jquery-1.6.4.min.js
- http://jquery.com:80/
- http://jquery.org:80/license
- http://tomcat.apache.org:80/
- http://www.apache.org:80/
- http://wiki.apache.org:80/tomcat/FAQ
- http://tomcat.apache.org:80/connectors-doc/
- http://wiki.apache.org:80/tomcat/TomcatVersions
- http://wiki.apache.org:80/tomcat/Specifications
- http://www.jcp.org:80/
- http://tomcat.apache.org:80/connectors-doc/index.html
- http://jcp.org:80/aboutJava/communityprocess/final/jsr315/index.
html
- http://docs.oracle.com:80/javaee/6/api/index.html?
javax/servlet/package-summary.html
- http://jcp.org:80/aboutJava/communityprocess/mrel/jsr245/index.
html
javax/servlet/jsp/package-summary.html
javax/el/package-summary.html
- https://jcp.org:
443/aboutJava/communityprocess/mrel/jsr356/index.html
- http://docs.oracle.com:
80/javaee/7/api/javax/websocket/package-summary.html
- http://tomcat.apache.org:80/findhelp.html
- http://tomcat.apache.org:80/lists.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/index.html
- https://comments.apache.org:443/show_comments.lua?site=
- http://ant.apache.org:80/
- http://localhost:8080/manager/html
- http://zero.webappsecurity.com:80/docs/appdev/index.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/appdev/index.html
- http://localhost:8080/manager/text/deploy?path=/foo
13
Parent Url
Page Url(s)
- http://localhost:8080/manager/text/deploy?
path=/footoo&tag=footag
path=/footoo&war=file:/path/to/foo
war=file:/path/to/bar.war
- http://localhost:8080/manager/text/deploy?war=foo
- http://localhost:8080/manager/text/deploy?war=bar.war
config=file:/path/context.xml
- http://localhost:8080/manager/text/deploy
- http://localhost:8080/manager/text/list
- http://localhost:8080/manager/text/reload?path=/examples
- http://localhost:8080/manager/text/serverinfo
- http://localhost:8080/manager/text/resources[?type=xxxxx]
- http://localhost:8080/manager/text/sessions?path=/examples
- http://localhost:8080/manager/text/expire?
path=/examples&idle=num
- http://localhost:8080/manager/text/start?path=/examples
- http://localhost:8080/manager/text/stop?path=/examples
- http://localhost:8080/manager/text/undeploy?path=/examples
html
- http://wiki.apache.org:80/tomcat/
- http://localhost:8080/manager/text/findleaks[?statusLine=
[true|false]]
html
- http://www.jguru.com:80/faq/home.jsp?topic=Tomcat
- http://localhost:8080/manager/text/threaddump
- http://localhost:8080/manager/text/vminfo
- http://localhost:8080/manager/status
- http://localhost:8080/manager/status/all
html
- http://www.google.com:80/search?q=tomcat%20mailing%20list%
20archives
- http://tomcat.apache.org:80/maven-plugin.html
- http://localhost:8080/manager/status?XML=true
14
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/docs/setup.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/setup.html
html
- http://www.google.com:80/search?
q=tomcat+mailing+list+archives
- http://localhost:8080/manager/status/all?XML=true
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/introduction.html
80/docs/security-manager-howto.html
80/javase/7/docs/technotes/guides/security/
80/javase/6/docs/technotes/guides/security/PolicyGuide.html
- http://localhost:8080/manager/text
- http://webserver:80/manager/jmxproxy/?qry=STUFF
- http://webserver:80/manager/jmxproxy/?
get=BEANNAME&att=MYATTRIBUTE&key=MYKEY
- http://www.oracle.com:
80/technetwork/java/seccodeguide-139067.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/deployer-howto.html
get=java.lang:type=Memory&att=HeapMemoryUsage
- http://webserver:80/manager/jmxproxy/
set=BEANNAME&att=MYATTRIBUTE&val=NEWVALUE
- http://localhost:8080/manager/jmxproxy/
- http://tomcat.apache.org:80/tomcat-7.0-doc/manager-howto.html
- http://tomcat.apache.org:80/tomcat-7.
0-doc/security-manager-howto.html
- http://docs.oracle.com:80/javase/6/docs/api/index.html?
java/sql/DriverManager.html
- http://commons.apache.org:80/
- http://httpd.apache.org:80/docs/howto/ssi.html
- http://commons.apache.org:80/dbcp/configuration.html
- http://zero.webappsecurity.com:80/docs/cgi-howto.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/cgi-howto.html
- http://www.mysql.com:80/products/mysql/index.html
15
Parent Url
Page Url(s)
80/technetwork/java/javaee/overview/index.html
- http://www.openssl.org:80/
80/javase/7/docs/technotes/guides/jndi/index.html
- http://www.mysql.com:80/products/connector-j
80/technetwork/java/javaee/documentation/index.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/ssi-howto.html
- http://mmmysql.sourceforge.net:80/
80/technetwork/java/index-jsp-135995.html
- http://tomcat.apache.org:80/taglibs/standard/
- http://localhost:8080/examples/jsp/security/protected/
- http://otn.oracle.com:80/
- http://bz.apache.org:80/bugzilla/show_bug.cgi?id=22679
- http://www.openldap.org:80/
- http://www.jcp.org:80/en/jsr/detail?id=196
80/javase/7/docs/technotes/guides/security/jaas/tutorials/General
AcnOnly.html
80/javase/7/docs/technotes/guides/security/jaas/JAASLMDevGuide
.html
80/javase/7/docs/technotes/guides/security/jaas/tutorials/LoginCo
nfigFile.html
- http://www.oracle.com:80/technetwork/java/javamail/index.html
- http://javamail.java.net:80/
- http://java.sun.com:80/
- http://www.oracle.com:80/technetwork/java/javase/jdbc/index.
html
- http://www.w3.org:80/
16
Parent Url
Page Url(s)
- http://java.sun.com:80/xml/ns/j2ee
- http://java.sun.com:80/j2se/1.3/docs/guide/jdbc/spec2/jdbc2.1.
frame.html
- http://www.w3.org:80/2001/XMLSchema-instance
80/technetwork/java/javaee/overview/index.htm
- http://java.sun.com:80/xml/ns/j2ee/web-app_2_4.xsd
- http://localhost:8080/myapp/j_security_check
- http://java.sun.com:80/jsp/jstl/sql
- http://tomcat.apache.org:80/tomcat-7.0-doc/realm-howto.html
- http://java.sun.com:80/jsp/jstl/core
- https://localhost:8443/
- http://localhost:8080/DBTest/test.jsp
- http://www.verisign.com:80/support/install/intermediate.html
0-doc/jndi-datasource-examples-howto.html
- http://www.verisign.com:
80/support/verisign-intermediateca/Trial_Secure_Server_Root/index.html
0-doc/jndi-resources-howto.html
- http://www.trustcenter.de:80/certservices/cacerts/en/en.htm
- http://www.thawte.com:80/certs/trustmap.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/ssl-howto.html
- http://www.w3.org:80/1999/XSL/Transform
80/docs/proxy-howto.html
- http://localhost:8081/myapp
- http://tomcat.apache.org:80/tomcat-7.0-doc/default-servlet.html
80/docs/proxy-howto.html
- http://localhost:80/myapp/*
17
Parent Url
Page Url(s)
- http://tomcat.apache.org:80/tomcat-7.0-doc/proxy-howto.html
- http://zero.webappsecurity.com:80/docs/connectors.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/connectors.html
80/docs/mbeans-descriptor-howto.html
0-doc/mbeans-descriptor-howto.html
80/docs/balancer-howto.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/balancer-howto.html
- http://zero.webappsecurity.com:80/docs/apr.html
- http://apr.apache.org:80/
- http://tomcat.apache.org:80/download-native.cgi
- http://tomcat.apache.org:80/tomcat-7.0-doc/apr.html
80/docs/cluster-howto.html
0-doc/api/org/apache/catalina/tribes/Channel.html
- http://wiki.apache.org:80/tomcat/FAQ/Clustering
- http://commons.apache.org:80/logging
80/javase/6/docs/api/java/util/logging/package-summary.html
80/docs/maven-jars.html
- http://repository.apache.org:
80/content/repositories/snapshots/org/apache/tomcat/
80/docs/cluster-howto.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/cluster-howto.html
80/docs/virtual-hosting-howto.html
0-doc/virtual-hosting-howto.html
- http://logging.apache.org:80/log4j/
- http://repo2.maven.org:80/maven2/org/apache/tomcat/
80/docs/class-loader-howto.html
- http://commons.apache.org:80/daemon/
- http://logging.apache.org:80/log4j
- http://docs.oracle.com:80/javase/1.5.
0/docs/guide/standards/index.html
- http://logging.apache.org:80/log4j/docs/documentation.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/maven-jars.html
0-doc/class-loader-howto.html
- http://zero.webappsecurity.com:80/docs/aio.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/aio.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/logging.html
18
80/docs/RELEASE-NOTES.txt
- http://www.wassenaar.org:80/
- http://tomcat.apache.org:80/faq/
- http://zero.webappsecurity.com:80/docs/api/index.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/
- http://zero.webappsecurity.com:80/docs/extras.html
- http://tomcat.apache.org:80/download-70.cgi
- http://zero.webappsecurity.com:80/docs/api/index.html
- http://www.w3.org:80/TR/REC-html40/strict.dtd
- http://zero.webappsecurity.com:80/docs/extras.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/extras.html
- http://cve.mitre.org:80/cgi-bin/cvename.cgi?name=
CVE-2009-3555
- http://tomcat.apache.org:80/security-7.html
html
80/javase/6/docs/technotes/guides/management/agent.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/security-howto.html
0-doc/windows-service-howto.html
80/docs/web-socket-howto.html
- http://tools.ietf.org:80/html/rfc6455
- http://www.jcp.org:80/en/jsr/detail?id=356
- http://svn.apache.org:80/viewvc/tomcat/tc7.0.
x/trunk/webapps/examples/websocket/
x/trunk/webapps/examples/WEB-INF/classes/websocket/
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/index.html
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/monitoring.html
80/docs/windows-auth-howto.html
- http://www.adopenstatic.com:
80/cs/blogs/ken/archive/2006/10/19/512.aspx
- http://zero.webappsecurity.com:80/docs/jdbc-pool.html
- http://commons.apache.org:80/dbcp/
80/docs/architecture/index.html
0-doc/architecture/index.html
- http://docs.oracle.com:80/javase/6/docs/api/javax/sql/DataSource
.html
19
Parent Url
Page Url(s)
80/technetwork/java/javase/downloads/index.html
- http://spnego.sourceforge.net:80/index.html
0/docs/guide/security/jgss/tutorials/index.html
- http://ant.apache.org:80/bindownload.cgi
- https://cwiki.apache.org:
443/confluence/display/GMOxDOC21/Using%20SPNEGO%20in%
20Geronimo
x/trunk/webapps/examples/websocket-deprecated/
- http://svn.apache.org:80/repos/asf/tomcat/tc7.0.x/trunk/
- http://zero.webappsecurity.com:80/docs/developers.
html
- http://wiki.apache.org:80/tomcat/SupportAndTraining
- https://bz.apache.org:443/bugzilla/show_bug.cgi?id=50025
- http://blogs.msdn.com:
80/b/openspecification/archive/2010/11/17/encryption-typeselection-in-kerberos-exchanges.aspx
x/trunk/webapps/examples/WEB-INF/classes/websocket/tc7/
- http://svn.apache.org:80/viewvc/tomcat/trunk/modules/jdbc-pool/
- http://zero.webappsecurity.com:80/docs/developers.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/developers.html
0-doc/web-socket-howto.html
- http://support.microsoft.com:80/kb/977321
- http://tomcat.apache.org:80/tomcat-7.0-doc/building.html
- http://waffle.codeplex.com:80/
- http://static.springsource.org:
80/spring-security/site/extensions/krb/index.html
- http://spnego.sourceforge.net:80/index.html/
- http://tomcat.apache.org:80/tomcat-7.0-doc/jdbc-pool.html
- http://www.ioplex.com:80/
20
Parent Url
Page Url(s)
- http://tomcat.apache.org:
80/connectors-doc/webserver_howto/iis.html
- http://sourceforge.net:80/projects/mod-auth-sspi/
- http://zero.webappsecurity.com:80/README.txt
- http://www.vixtrix.net:80/
- http://adldap.sourceforge.net:80/wiki/doku.php?
id=mod_auth_ntlm_winbind
80/connectors-doc/webserver_howto/apache.html
- http://ant.apache.org:80/manual/Tasks/javac.html
- https://bz.apache.org:443/bugzilla/show_bug.cgi?id=39089
80/docs/funcspecs/index.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/funcspecs/index.html
- https://cwiki.apache.org:
443/confluence/display/GMOxDOC21/Using+SPNEGO+in+Geronim
o
- http://bugs.sun.com:80/bugdatabase/view_bug.do?
bug_id=6294277
0-doc/windows-auth-howto.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/jasper-howto.html
- http://zero.webappsecurity.com:80/docs/comments.
html
- https://comments.apache.org:443/help.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/comments.html
80/docs/tribes/introduction.html
0-doc/tribes/introduction.html
0-doc/appdev/deployment.html
html
80/javase/7/docs/api/javax/security/sasl/Sasl.html
2/docs/guide/security/jaas/tutorials/LoginConfigFile.html
80/docs/appdev/installation.html
- http://www.cvshome.org:80/
0-doc/appdev/processes.html
80/docs/appdev/installation.html
0-doc/appdev/installation.html
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/realm.html
21
Parent Url
- http://zero.webappsecurity.com:80/docs/config/valve.
html
Page Url(s)
- http://httpd.apache.org:80/
80/connectors-doc/generic_howto/proxy.html
- http://www.w3.org:80/TR/WD-logfile.html
- http://httpd.apache.org:80/docs/trunk/mod/mod_remoteip.html
80/docs/html-manager-howto.html
0-doc/html-manager-howto.html
html
- https://bugs.openjdk.java.net:443/browse/JDK-8048194
- http://localhost:8080/
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/valve.html
80/docs/appdev/introduction.html
- http://jcp.org:80/aboutJava/communityprocess/mrel/jsr315/index.
html
- http://localhost:1977/
80/docs/appdev/sample/
- http://localhost:8080/sample
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/http.html
- http://jcp.org:80/aboutJava/communityprocess/mrel/jsr245/
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/ajp.html
- http://zero.webappsecurity.com:80/docs/appdev/source
.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/appdev/source.html
- http://jcp.org:80/aboutJava/communityprocess/mrel/jsr315/
- http://tomcat.apache.org:80/native-doc/
0-doc/appdev/introduction.html
- http://openssl.org:80/
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/context.html
- http://zero.webappsecurity.com:80/docs/config/host.
html
- http://www.mycompany.com:8080/~craigmcc
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/host.html
22
Parent Url
Page Url(s)
80/docs/config/globalresources.html
0-doc/config/globalresources.html
- http://zero.webappsecurity.com:80/docs/config/engine.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/engine.html
- http://zero.webappsecurity.com:80/docs/config/server.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/server.html
- http://zero.webappsecurity.com:80/docs/config/service.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/service.html
- http://zero.webappsecurity.com:80/docs/config/listeners
.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/listeners.html
html
- http://docs.oracle.com:80/javase/6/docs/api/java/net/Socket.html
80/javase/6/docs/technotes/guides/security/StandardNames.html
80/javase/7/docs/technotes/guides/security/StandardNames.html
- http://httpd.apache.org:80/docs/2.2/mod/mod_ssl.html
- http://zero.webappsecurity.com:80/docs/config/cluster.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/cluster.html
80/docs/config/cluster-manager.html
0-doc/config/cluster-manager.html
80/docs/config/cluster-receiver.html
0-doc/config/cluster-receiver.html
80/docs/config/cluster-membership.html
0-doc/config/cluster-membership.html
80/docs/config/cluster-channel.html
0-doc/config/cluster-channel.html
80/docs/config/cluster-sender.html
0-doc/config/cluster-sender.html
- http://zero.webappsecurity.com:80/docs/config/ajp.html
- http://httpd.apache.org:80/docs/2.2/mod/mod_proxy_ajp.html
80/docs/config/cluster-deployer.html
0-doc/config/cluster-deployer.html
80/docs/config/cluster-interceptor.html
0-doc/config/cluster-interceptor.html
80/docs/config/cluster-listener.html
0-doc/config/cluster-listener.html
- http://zero.webappsecurity.com:80/docs/config/loader.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/loader.html
80/docs/config/cluster-valve.html
0-doc/config/cluster-valve.html
23
Parent Url
Page Url(s)
80/docs/config/jar-scanner.html
0-doc/config/jar-scanner.html
80/docs/config/executor.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/executor.html
80/docs/config/resources.html
0-doc/config/resources.html
80/docs/config/manager.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/manager.html
80/docs/architecture/startup.html
0-doc/architecture/startup.html
- http://zero.webappsecurity.com:80/docs/BUILDING.txt
- http://cobertura.sf.net:80/
80/docs/config/sessionidgenerator.html
0-doc/config/sessionidgenerator.html
- http://commons.apache.org:80/dbcp
html
- http://www.w3.org:80/TR/cors/
0-doc/architecture/overview.html
0-doc/config/systemprops.html
80/docs/architecture/requestProcess.html
0-doc/architecture/requestProcess.html
html
- http://httpd.apache.org:80/docs/2.2/mod/mod_expires.html
- http://www.w3.org:80/Protocols/rfc2616/rfc2616-sec14.html
- http://httpd.apache.org:80/docs/2.2/mod/mod_headers.html
80/docs/funcspecs/fs-admin-opers.html
0-doc/funcspecs/fs-admin-opers.html
html
- https://www.apache.org:443/
80/docs/funcspecs/fs-admin-apps.html
- http://docs.oracle.com:80/javase/7/docs/technotes/guides/idl
80/technetwork/java/javase/tech/javamanagement-140525.html
- http://docs.oracle.com:80/javase/7/docs/technotes/guides/rmi
80/technetwork/java/javase/overview/index.html
24
Parent Url
Page Url(s)
- http://www.jcp.org:80/jsr/detail/154.jsp
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/config/filter.html
- http://www.jcp.org:80/jsr/detail/152.jsp
- http://jakarta.apache.org:80/taglibs/doc/standard-doc/intro.html
html
- http://struts.apache.org:80/
html
80/docs/funcspecs/fs-jndi-realm.html
0-doc/funcspecs/fs-jndi-realm.html
html
80/docs/funcspecs/fs-default.html
- http://java.sun.com:80/products/servlet/download.html
html
0-doc/funcspecs/fs-admin-apps.html
- http://www.rfc-editor.org:80/rfc/rfc2046.txt
html
- http://www.rfc-editor.org:80/rfc/rfc2616.txt
80/docs/funcspecs/fs-jdbc-realm.html
0-doc/funcspecs/fs-jdbc-realm.html
html
25
80/docs/funcspecs/mbean-names.html
0-doc/funcspecs/mbean-names.html
html
80/docs/funcspecs/fs-admin-objects.html
0-doc/funcspecs/fs-admin-objects.html
html
0-doc/funcspecs/fs-default.html
html
26
Parent Url
Page Url(s)
27
Parent Url
Page Url(s)
28
Parent Url
Page Url(s)
29
Parent Url
Page Url(s)
30
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/docs/tribes/faq.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/tribes/faq.html
html
- http://zero.webappsecurity.com:80/docs/appdev/web.
xml.txt
- http://java.sun.com:80/dtd/web-app_2_3.dtd
html
xml.txt
- http://localhost:8080/{context-path}/servlet/{classname}
html
xml.txt
- http://localhost:8080/{contextpath}/graph
html
0-doc/funcspecs/fs-memory-realm.html
html
xml.txt
- http://localhost:8080/{contextpath}/saveCustomer.do
html
- http://zero.webappsecurity.com:80/docs/tribes/setup.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/tribes/setup.html
80/docs/tribes/transport.html
- http://tomcat.apache.org:80/tomcat-7.0-doc/tribes/transport.html
80/docs/tribes/interceptors.html
0-doc/tribes/interceptors.html
html
80/docs/tribes/developers.html
0-doc/tribes/developers.html
- http://zero.webappsecurity.com:80/docs/tribes/status.
html
- http://tomcat.apache.org:80/tomcat-7.0-doc/tribes/status.html
html
31
Parent Url
Page Url(s)
80/docs/tribes/membership.html
0-doc/tribes/membership.html
html
xml.txt
- http://localhost:8080/tomcat-docs/manager-howto.html
html
32
Parent Url
Page Url(s)
33
Parent Url
Page Url(s)
34
Parent Url
Page Url(s)
80/docs/config/automatic-deployment.html
0-doc/config/automatic-deployment.html
html
35
Parent Url
Page Url(s)
- http://svn.apache.org:80/viewvc?view=rev&rev=797162
36
Parent Url
Page Url(s)
37
Parent Url
Page Url(s)
38
Parent Url
Page Url(s)
- http://www.apache.org:80/legal/src-headers.html
39
Parent Url
Page Url(s)
40
Parent Url
Page Url(s)
41
Parent Url
Page Url(s)
42
Parent Url
Page Url(s)
43
Parent Url
Page Url(s)
44
Parent Url
Page Url(s)
45
Parent Url
Page Url(s)
46
Parent Url
Page Url(s)
47
Parent Url
Page Url(s)
48
Parent Url
Page Url(s)
49
Parent Url
Page Url(s)
50
Parent Url
Page Url(s)
51
Parent Url
Page Url(s)
- http://jcp.org:
80/aboutJava/communityprocess/maintenance/jsr315/servlet3-mrreva.html
52
Parent Url
Page Url(s)
- http://bugs.sun.com:80/view_bug.do?bug_id=6427854
53
Parent Url
Page Url(s)
54
Parent Url
Page Url(s)
55
Parent Url
Page Url(s)
56
Parent Url
Page Url(s)
57
Parent Url
Page Url(s)
58
Parent Url
Page Url(s)
59
Parent Url
Page Url(s)
60
Parent Url
Page Url(s)
61
Parent Url
Page Url(s)
62
Parent Url
Page Url(s)
63
Parent Url
Page Url(s)
64
Parent Url
Page Url(s)
65
Parent Url
Page Url(s)
66
Parent Url
Page Url(s)
- http://zero.webappsecurity.com:80/include/common.inc
- http://welcome.hp.com:80/country/us/en/welcome.html
html
- http://zero.webappsecurity.com:80/include/common.inc
- http://iapproautocm.austin.hp.com:
80/hp-iap-autocomplete/search
html
Server Errors
URL:
Error Code:
http://zero.webappsecurity.com:80/account/
500
67
http://zero.webappsecurity.com:80/<script>alert('TRACK');</script>
501
68

Qa Summary

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Qa Summary

Uploaded by

Copyright:

Available Formats

HPE Security WebInspect

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016

Report Date: 10/10/2016