ZAP Full Scan Report - Githubissues

kumardineshwar / nopCommerce

The most popular open-source eCommerce shopping cart solution based on ASP.NET Core

https://www.nopcommerce.com

Other

0 stars 1 forks source link

ZAP Full Scan Report #1

Open github-actions[bot] opened 3 years ago

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184 New Alerts
- HTTP Only Site [10106] total: 1:
  - http://34.88.214.184/Install/RestartInstall
Site: http://34.88.214.184 New Alerts
- User Agent Fuzzer [10104] total: 20:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Cookie Slack Detector [90027] total: 20:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Modern Web Application [10109] total: 1:
  - http://34.88.214.184/lib_npm/jquery/jquery.min.js
- Information Disclosure - Suspicious Comments [10027] total: 3:
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- X-Frame-Options Header Not Set [10020] total: 2:
  - http://34.88.214.184/Install/RestartInstall
  - http://34.88.214.184/install
- Timestamp Disclosure - Unix [10096] total: 1:
  - http://34.88.214.184/lib_npm/jquery-validation/jquery.validate.min.js
- Hidden File Found [40035] total: 1:
  - http://34.88.214.184/.svn/entries

View the following link to download the report. RunnerID:1201868771

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Integer Overflow Error [30003] total: 20:
  Resolved Alerts
- Hidden File Found [40035] total: 1:

View the following link to download the report. RunnerID:1208785866

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Application Error Disclosure [90022] total: 3:
  Resolved Alerts
- User Agent Fuzzer [10104] total: 20:
- Timestamp Disclosure - Unix [10096] total: 2:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Integer Overflow Error [30003] total: 20:
- Modern Web Application [10109] total: 1:
- Cookie Slack Detector [90027] total: 20:
- Information Disclosure - Suspicious Comments [10027] total: 3:
- X-Frame-Options Header Not Set [10020] total: 2:

View the following link to download the report. RunnerID:1208910267

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- User Agent Fuzzer [10104] total: 20:
- Timestamp Disclosure - Unix [10096] total: 2:
  - http://34.88.214.184/lib_npm/jquery-validation/jquery.validate.min.js
  - http://34.88.214.184/install
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Integer Overflow Error [30003] total: 20:
- Modern Web Application [10109] total: 1:
  - http://34.88.214.184/lib_npm/jquery/jquery.min.js
- Cookie Slack Detector [90027] total: 20:
- Information Disclosure - Suspicious Comments [10027] total: 3:
- X-Frame-Options Header Not Set [10020] total: 2:
  - http://34.88.214.184/Install/RestartInstall
  - http://34.88.214.184/install
  Resolved Alerts
- Application Error Disclosure [90022] total: 3:

View the following link to download the report. RunnerID:1209033030

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Application Error Disclosure [90022] total: 3:
  Resolved Alerts
- User Agent Fuzzer [10104] total: 20:
- Timestamp Disclosure - Unix [10096] total: 2:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Integer Overflow Error [30003] total: 20:
- Modern Web Application [10109] total: 1:
- Cookie Slack Detector [90027] total: 20:
- Information Disclosure - Suspicious Comments [10027] total: 3:
- X-Frame-Options Header Not Set [10020] total: 2:

View the following link to download the report. RunnerID:1209086709

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- User Agent Fuzzer [10104] total: 20:
- Cookie Slack Detector [90027] total: 20:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Modern Web Application [10109] total: 1:
  - http://34.88.214.184/lib_npm/jquery/jquery.min.js
- Information Disclosure - Suspicious Comments [10027] total: 3:
- Timestamp Disclosure - Unix [10096] total: 2:
  - http://34.88.214.184/install
  - http://34.88.214.184/lib_npm/jquery-validation/jquery.validate.min.js
- X-Frame-Options Header Not Set [10020] total: 2:
  - http://34.88.214.184/Install/RestartInstall
  - http://34.88.214.184/install
- Hidden File Found [40035] total: 1:
  - http://34.88.214.184/.svn/entries
  Resolved Alerts
- Application Error Disclosure [90022] total: 3:

View the following link to download the report. RunnerID:1210781796

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Integer Overflow Error [30003] total: 20:
  Resolved Alerts
- Hidden File Found [40035] total: 1:

View the following link to download the report. RunnerID:1222248767

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Application Error Disclosure [90022] total: 3:
  Resolved Alerts
- User Agent Fuzzer [10104] total: 20:
- Timestamp Disclosure - Unix [10096] total: 2:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Integer Overflow Error [30003] total: 20:
- Modern Web Application [10109] total: 1:
- Cookie Slack Detector [90027] total: 20:
- Information Disclosure - Suspicious Comments [10027] total: 3:
- X-Frame-Options Header Not Set [10020] total: 2:

View the following link to download the report. RunnerID:1224349584

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- User Agent Fuzzer [10104] total: 20:
- Cookie Slack Detector [90027] total: 20:
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 20:
- Modern Web Application [10109] total: 1:
  - http://34.88.214.184/lib_npm/jquery/jquery.min.js
- Information Disclosure - Suspicious Comments [10027] total: 3:
- X-Frame-Options Header Not Set [10020] total: 2:
  - http://34.88.214.184/Install/RestartInstall
  - http://34.88.214.184/install
- Timestamp Disclosure - Unix [10096] total: 1:
  - http://34.88.214.184/lib_npm/jquery-validation/jquery.validate.min.js
- Hidden File Found [40035] total: 1:
  - http://34.88.214.184/.svn/entries
  Resolved Alerts
- Application Error Disclosure [90022] total: 3:

View the following link to download the report. RunnerID:1224335766

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Remote OS Command Injection [90020] total: 2:
  - http://34.88.214.184/install
  - http://34.88.214.184/install

View the following link to download the report. RunnerID:1224341396

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Integer Overflow Error [30003] total: 20:
  Resolved Alerts
- Hidden File Found [40035] total: 1:

View the following link to download the report. RunnerID:1224377383

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 Resolved Alerts
- Remote OS Command Injection [90020] total: 2:

View the following link to download the report. RunnerID:1224390698

github-actions[bot] commented 3 years ago

Site: https://34.88.214.184
Site: http://34.88.214.184 New Alerts
- Hidden File Found [40035] total: 1:
  - http://34.88.214.184/.svn/entries
  Resolved Alerts
- Integer Overflow Error [30003] total: 20:

View the following link to download the report. RunnerID:1224686799