ZAP Full Scan Report - Githubissues

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts

View the following link to download the report. RunnerID:4198159638

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4703356687

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:
  Resolved Alerts
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4723656396

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4724175331

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:

View the following link to download the report. RunnerID:4724491658

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts

View the following link to download the report. RunnerID:4725147283

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4726377190

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts

View the following link to download the report. RunnerID:4767452883

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:
  Resolved Alerts
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4770902916

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 1:
  - https://alphasite.dts-stn.com/fr/desabonnement?email=zaproxy%40example.com
  Resolved Alerts
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4790030781

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4790415065

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4790561179

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:
  Resolved Alerts
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4790472881

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:

View the following link to download the report. RunnerID:4790456188

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:

View the following link to download the report. RunnerID:4790556909

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4794322946

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4794323808

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4800940198

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4810664122

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4810746522

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4814549857

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4814547892

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4814550773

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4814548973

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4814551241

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4822033445

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4836098675

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4857637896

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:
  Resolved Alerts
- Source Code Disclosure - File Inclusion [43] total: 2:

View the following link to download the report. RunnerID:4874441782

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4876458397

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4876489318

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com New Alerts
- Information Disclosure - Sensitive Information in URL [10024] total: 5:
  Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Anti-CSRF Tokens Check [20012] total: 10:

View the following link to download the report. RunnerID:4876383347

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4876589829

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4876679986

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4876752286

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4878944543

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4878943864

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4878943297

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4885236335

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4885324868

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4885539900

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886064251

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886297954

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886311821

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886331280

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886353497

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886462731

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886511898

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886550551

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4886569396

github-actions[bot] commented 1 year ago

Site: https://alphasite.dts-stn.com Resolved Alerts
- SQL Injection - SQLite [40024] total: 2:
- Source Code Disclosure - File Inclusion [43] total: 2:
- Absence of Anti-CSRF Tokens [10202] total: 5:
- Anti-CSRF Tokens Check [20012] total: 10:
- CSP: script-src unsafe-inline [10055] total: 6:
- CSP: style-src unsafe-inline [10055] total: 6:
- Sub Resource Integrity Attribute Missing [90003] total: 14:
- Cross-Domain JavaScript Source File Inclusion [10017] total: 8:
- Content-Type Header Missing [10019] total: 1:
- Information Disclosure - Suspicious Comments [10027] total: 7:
- Modern Web Application [10109] total: 7:
- Re-examine Cache-control Directives [10015] total: 6:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 15:

View the following link to download the report. RunnerID:4889223961

DTS-STN / Service-Canada-Labs

ZAP Full Scan Report #671