copyright of bangladesh scan result

7/31/2019 Copyright of Bangladesh Scan Result

1/65

The Copyright OfBangladesh Website Detail

Scan Result

12 June, 2012

Detailed Scan Report

Generated by Acunetix WVS Reporter (v7.0 Build 20110406)


2/65

Scan of http://copyrightoffice.gov.bd:80/

Scan information

Scan details

Starttime 6/12/2012 3:25:10 PM

Finish time 6/12/2012 3:36:26 PM

Scan time 11 minutes, 16 secondsProfile Default

Server information

Responsive True

Server banner Apache

Server OS Unknown

Server technologies

Threat level

Alerts distribution

High

Medium

LowInformational 23

14

7

8

52Total alerts found

Knowledge base

List of open TCP ports

2Scanned By Security Ways , Powered By Acunetix Website Audit


3/65



4/65



5/65



6/65



7/65



8/65



9/65



10/65



11/65



12/65



13/65


14/65



15/65



16/65



17/65



18/65



19/65



20/65



21/65



22/65



23/65



24/65



25/65



26/65



27/65



28/65



29/65



30/65



31/65

DNS server running

FTP server running

DNS server running on TCP

Whois lookup



32/65

IMAP server running

MySQL server running

POP3 server running

SMTP server running

SMTP server running



33/65

Alerts summary

Blind SQL Injection

Affects Variations

1/index.php

File inclusion

Affects Variations

6/index.php

SQL injection

Affects Variations

1/index.php

Application error message

Affects Variations

3/index.php

Backup files

Affects Variations

1/index1.php

Error message on page

Affects Variations

1/images/index.php

SMTP open mail relay

Affects Variations

2Server

Directory Listing

Affects Variations

1/admin/css

1/admin/css/New%20Folder

1/admin/css/uxa

1/admin/images

1/admin/pic

1/css

1/images/banner



34/65

Possible sensitive directories

Affects Variations

1/~admin

1/admin

1/cgi-sys

1/config

1/mailman

Session Cookie without HttpOnly flag set

Affects Variations

1/

Session Cookie without Secure flag set

Affects Variations

1/

Broken links

Affects Variations

1/admin/pic/404.php

1/admin/pic/fix.php

1/admin/styles.css

1/admin/userhomepage/request.php

1/function.include

1/function.include-once

1/images/function.include

1/images/function.require

1/images/function.require-once

1/inex.php

1/inex.php (78372301ace0fb1ebef3409b3714b14a)

Email address found

Affects Variations

1/admin/index.php

GHDB: Apache directory listing which show Apache version

Affects Variations

1/admin/css

1/admin/css/New%20Folder

1/admin/css/uxa

1/admin/images

1/admin/pic1/css

1/images/banner

Password type input with autocomplete enabled

Affects Variations

1/admin

1/admin/index.php

Possible server path disclosure (Unix)

Affects Variations

1/images/index.php



35/65

Possible username or password disclosure

Affects Variations

1/admin/index.php



36/65

Alert details

Blind SQL Injection

HighSeverity

ValidationType

Scripting (Blind_Sql_Injection.script)Reported by module

Impact

Description

Recommendation

Affected items

Details

/index.php

GET /index.php?action=noticeboard&id=%24%7binjecthere%7d HTTP/1.1

Cookie: PHPSESSID=82a56a911401903d5cc82a19cdea9c0c

Host: copyrightoffice.gov.bd:80

Connection: Keep-aliveAccept-Encoding: gzip,deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

Request

HTTP/1.1 200 OK

Via: 1.1 ROOT

Connection: Keep-Alive

Proxy-Connection: Keep-Alive

Date: Tue, 12 Jun 2012 08:56:44 GMT

Content-Type: text/html

Server: Apache

Keep-Alive: timeout=5, max=74

Content-Length: 13923

Response

File inclusion



37/65

HighSeverity

ValidationType

Scripting (File_Inclusion.script)Reported by module

Impact

Description

Recommendation

Affected items

Details

/index.php

POST /index.php?action=1some_inexistent_file_with_long_name HTTP/1.1Content-Length: 662

Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_RNOYBCPIMA



Connection: Keep-alive

Accept-Encoding: gzip,deflate


-------AcunetixBoundary_RNOYBCPIMA

Content-Disposition: form-data; name="comments"

-------AcunetixBoundary_RNOYBCPIMAContent-Disposition: form-data; name="companyname"


Content-Disposition: form-data; name="country"

USA


Content-Disposition: form-data; name="email"


Content-Disposition: form-data; name="name"


Content-Disposition: form-data; name="phone"

Request



38/65


Content-Disposition: form-data; name="Submit"

Submit

HTTP/1.1 200 OK

Via: 1.1 ROOTConnection: Keep-Alive


Date: Tue, 12 Jun 2012 08:56:59 GMT


Server: Apache



Response

Details

/index.php

POST /index.php?action=1some_inexistent_file_with_long_name HTTP/1.1

Content-Length: 665

Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_SSUVPHEINR






-------AcunetixBoundary_SSUVPHEINR



Content-Disposition: form-data; name="companyname"



Canada-------AcunetixBoundary_SSUVPHEINR






-------AcunetixBoundary_SSUVPHEINRContent-Disposition: form-data; name="Submit"

Submit

-------AcunetixBoundary_SSUVPHEINR--

Request



39/65

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:57:01 GMT


Server: Apache



Response

Details

/index.php

POST /index.php?action=1some_inexistent_file_with_long_name HTTP/1.1

Content-Length: 673Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_QLYOCQLOCA






-------AcunetixBoundary_QLYOCQLOCA



Content-Disposition: form-data; name="companyname"



United Kingdom








Content-Disposition: form-data; name="Submit"

Submit

-------AcunetixBoundary_QLYOCQLOCA--

Request

HTTP/1.1 200 OKVia: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:57:02 GMT

Response



40/65


Server: Apache


Details

/index.php

GET /index.php?action=1some_inexistent_file_with_long_name&id=21 HTTP/1.1






Request




Date: Tue, 12 Jun 2012 08:55:57 GMT


Server: Apache



Response

Details

/index.php

GET /index.php?action=1some_inexistent_file_with_long_name&id=22 HTTP/1.1






Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:55:56 GMT


Server: Apache



Response



41/65

Details

/index.php

GET /index.php?action=1some_inexistent_file_with_long_name HTTP/1.1






Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:55:42 GMTContent-Type: text/html

Server: Apache



Response

SQL injection

HighSeverity

ValidationType

Scripting (Sql_Injection.script)Reported by module

Impact

Description

Recommendation

Affected items



42/65

Details

/index.php

GET /index.php?action=noticeboard&id=%24%7binjecthere%7d HTTP/1.1

Cookie: PHPSESSID=82a56a911401903d5cc82a19cdea9c0cHost: copyrightoffice.gov.bd:80




Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:56:20 GMT


Server: ApacheKeep-Alive: timeout=5, max=46


Response

Application error message

MediumSeverity

ValidationType

Scripting (Error_Message.script)Reported by module

Impact

Description

Recommendation

Affected items

Details

/index.php

GET /index.php?action=&id=22 HTTP/1.1


Host: copyrightoffice.gov.bd:80Connection: Keep-alive



Request

Response



43/65

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:55:56 GMT


Server: Apache



Details/index.php

GET /index.php?action= HTTP/1.1



Connection: Keep-aliveAccept-Encoding: gzip,deflate


Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:55:42 GMT


Server: Apache



Response

Details

/index.php

GET /index.php?action=&id=21 HTTP/1.1





Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Date: Tue, 12 Jun 2012 08:56:00 GMT


Server: Apache

Keep-Alive: timeout=5, max=54Content-Length: 12003

Response

Backup files



44/65

MediumSeverity

ValidationType

Scripting (Backup_File.script)Reported by module

Impact

Description

Recommendation

Affected items

Details

/index1.php

GET /index1.php HTTP/1.1

Range: bytes=0-99999






Request

HTTP/1.1 200 OK



Date: Tue, 12 Jun 2012 08:56:07 GMT


Server: Apache



Response

Error message on page

MediumSeverity

ValidationType

Scripting (Text_Search.script)Reported by module

Impact

Description

Recommendation



45/65

Affected items

Details

/images/index.php

GET /images/index.php HTTP/1.1

Pragma: no-cache

Acunetix-Aspect: enabled

Acunetix-Aspect-Password: *****

Acunetix-Aspect-Queries: filelist;aspectalerts

Host: copyrightoffice.gov.bd



Request

HTTP/1.1 200 OK



Date: Tue, 12 Jun 2012 08:55:18 GMT


Server: Apache



Response

SMTP open mail relay

MediumSeverity

ConfigurationType

Scripting (smtp_open_relay.script)Reported by module

Impact

Description

Recommendation

Affected items

Details

Server

Details

Server

Directory Listing



46/65

Low

Severity Information

Type Scripting (Directory_Listing.script)

Reported by module

Impact

Description

Recommendation

Affected items

Details

/admin/css

GET /admin/css/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/css/

Cookie: PHPSESSID=82a56a911401903d5cc82a19cdea9c0cHost: copyrightoffice.gov.bd



Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Content-Length: 705

Date: Tue, 12 Jun 2012 08:55:29 GMT

Content-Type: text/html;charset=ISO-8859-1

Server: ApacheKeep-Alive: timeout=5, max=75

Response

Details

/admin/css/New%20Folder

GET /admin/css/New%20Folder/ HTTP/1.1

Pragma: no-cache

Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****




Request



47/65



HTTP/1.1 200 OK

Via: 1.1 ROOT



Content-Length: 373

Date: Tue, 12 Jun 2012 08:55:30 GMTContent-Type: text/html;charset=ISO-8859-1

Server: Apache


Response

Details

/admin/css/uxa

GET /admin/css/uxa/ HTTP/1.1Pragma: no-cache









Request

HTTP/1.1 200 OK



Content-Length: 373

Date: Tue, 12 Jun 2012 08:55:30 GMT


Server: Apache


Response

Details

/admin/images

GET /admin/images/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/images/





Request

HTTP/1.1 200 OK

Via: 1.1 ROOT

Response



48/65




Date: Tue, 12 Jun 2012 08:55:31 GMT


Server: Apache

Details

/admin/pic

GET /admin/pic/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/pic/


Connection: Keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

Request

HTTP/1.1 200 OK

Via: 1.1 ROOT




Date: Tue, 12 Jun 2012 08:55:20 GMT


Server: Apache


Response

Details

/css

GET /css/ HTTP/1.1

Pragma: no-cache



Acunetix-Aspect-Queries: filelist;aspectalertsReferer: http://copyrightoffice.gov.bd/css/




Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Content-Length: 411

Date: Tue, 12 Jun 2012 08:55:18 GMT

Content-Type: text/html;charset=ISO-8859-1Server: Apache


Response



49/65

Details

/images/banner

GET /images/banner/ HTTP/1.1

Pragma: no-cacheAcunetix-Aspect: enabled



Referer: http://copyrightoffice.gov.bd/images/banner/




Request

HTTP/1.1 200 OK

Via: 1.1 ROOT


Proxy-Connection: Keep-AliveContent-Length: 514

Date: Tue, 12 Jun 2012 08:55:18 GMT


Server: Apache


Response

Possible sensitive directories

LowSeverity

ValidationType

Scripting (Possible_Sensitive_Directories.script)Reported by module

Impact

Description

Recommendation

Affected items

Details

/~admin

GET /~admin HTTP/1.1

Accept: acunetix/wvs






Request

Response



50/65

HTTP/1.1 301 Moved Permanently

Via: 1.1 ROOT



Content-Length: 317

Date: Tue, 12 Jun 2012 08:56:03 GMT

Location: http://copyrightoffice.gov.bd/~admin/

Content-Type: text/html; charset=iso-8859-1

Server: Apache


Details

/admin

GET /admin HTTP/1.1






Accept-Encoding: gzip,deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

Request


Via: 1.1 ROOT



Content-Length: 316

Date: Tue, 12 Jun 2012 08:56:00 GMT

Location: http://copyrightoffice.gov.bd/admin/


Server: Apache

Response

Details/cgi-sys

GET /cgi-sys HTTP/1.1








Request


Via: 1.1 ROOT



Content-Length: 318

Date: Tue, 12 Jun 2012 08:55:43 GMT

Location: http://copyrightoffice.gov.bd/cgi-sys/


Server: Apache


X-Pad: avoid browser bug

Response

Details

/config



51/65

GET /config HTTP/1.1








Request


Via: 1.1 ROOT



Content-Length: 317

Date: Tue, 12 Jun 2012 08:56:20 GMT

Location: http://copyrightoffice.gov.bd/config/


Server: Apache



Response

Details

/mailman

GET /mailman HTTP/1.1








Request


Via: 1.1 ROOT



Content-Length: 318

Date: Tue, 12 Jun 2012 08:55:53 GMT

Location: http://copyrightoffice.gov.bd/mailman/


Server: Apache



Response

Session Cookie without HttpOnly flag set

LowSeverity

InformationalType

CrawlerReported by module

Impact

Description



52/65

Recommendation

Affected items

Details

/

GET / HTTP/1.1

Pragma: no-cache







Request




Date: Tue, 12 Jun 2012 08:55:06 GMT


Server: Apache



Response

Session Cookie without Secure flag set

LowSeverity

InformationalType


Impact

Description

Recommendation

Affected items

Details

/

GET / HTTP/1.1

Pragma: no-cache



Request



53/65




HTTP/1.1 200 OK

Via: 1.1 ROOT




Server: Apache



Response

Broken links

InformationalSeverity

InformationalType


Impact

Description

Recommendation

Affected items

Details

/admin/pic/404.php

GET /admin/pic/404.php HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/index.php

Host: copyrightoffice.gov.bdConnection: Keep-alive


Request

HTTP/1.1 404 Not Found

Via: 1.1 ROOT



Content-Length: 406

Date: Tue, 12 Jun 2012 08:55:17 GMT


Server: Apache


Response

Details

/admin/pic/fix.php



54/65

GET /admin/pic/fix.php HTTP/1.1

Pragma: no-cache





Cookie: PHPSESSID=547bf09b56cb0072dedd2eb11fff5026


Connection: Keep-aliveUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

Request


Via: 1.1 ROOT



Content-Length: 406

Date: Tue, 12 Jun 2012 08:55:21 GMT


Server: Apache


Response

Details

/admin/styles.css

GET /admin/styles.css HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/index.php




Request


Via: 1.1 ROOT



Content-Length: 405

Date: Tue, 12 Jun 2012 08:55:21 GMT


Server: Apache


Response

Details

/admin/userhomepage/request.php

GET /admin/userhomepage/request.php HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/index.php

Cookie: PHPSESSID=82a56a911401903d5cc82a19cdea9c0cHost: copyrightoffice.gov.bd



Request

Response



55/65


56/65

Details

/images/function.include

GET /images/function.include HTTP/1.1

Pragma: no-cache



Acunetix-Aspect-Queries: filelist;aspectalertsReferer: http://copyrightoffice.gov.bd/images/index.php





Request


Via: 1.1 ROOT



Content-Length: 412

Date: Tue, 12 Jun 2012 08:55:21 GMTContent-Type: text/html; charset=iso-8859-1

Server: Apache


Response

Details

/images/function.require

GET /images/function.require HTTP/1.1

Pragma: no-cache


Acunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalerts

Referer: http://copyrightoffice.gov.bd/images/index.php





Request


Via: 1.1 ROOT



Content-Length: 412Date: Tue, 12 Jun 2012 08:55:21 GMT


Server: Apache


Response

Details

/images/function.require-once

GET /images/function.require-once HTTP/1.1

Pragma: no-cache

Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****


Referer: http://copyrightoffice.gov.bd/images/index.php


Request



57/65




Via: 1.1 ROOT



Content-Length: 417


Server: Apache


Response

Details

/inex.php

GET /inex.php HTTP/1.1

Pragma: no-cache







Request


Via: 1.1 ROOT



Content-Length: 397


Server: Apache


Response

Details

/inex.php (78372301ace0fb1ebef3409b3714b14a)

GET /inex.php?action=act4 HTTP/1.1

Pragma: no-cache







Request


Via: 1.1 ROOT



Content-Length: 397


Server: Apache


Response



58/65

Email address found


InformationalType


Impact

Description

Recommendation

Affected items

Details

/admin/index.php

GET /admin/index.php HTTP/1.1

Pragma: no-cache






Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Expires: Thu, 19 Nov 1981 08:52:00 GMT

Date: Tue, 12 Jun 2012 08:55:20 GMT

Content-Type: text/htmlServer: Apache

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: PHPSESSID=547bf09b56cb0072dedd2eb11fff5026; path=/



Response

GHDB: Apache directory listing which show Apache version


InformationalType

GHDBReported by module

Description



59/65

Impact

Recommendation

Affected items

Details

/admin/css

GET /admin/css/ HTTP/1.1

Pragma: no-cache









Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Content-Length: 705

Date: Tue, 12 Jun 2012 08:55:29 GMT


Server: Apache


Response

Details

/admin/css/New%20Folder

GET /admin/css/New%20Folder/ HTTP/1.1

Pragma: no-cache








Request

Response



60/65

HTTP/1.1 200 OK

Via: 1.1 ROOT



Content-Length: 373

Date: Tue, 12 Jun 2012 08:55:30 GMT


Server: Apache


Details/admin/css/uxa

GET /admin/css/uxa/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/css/Cookie: PHPSESSID=82a56a911401903d5cc82a19cdea9c0c




Request

HTTP/1.1 200 OK

Via: 1.1 ROOT



Content-Length: 373

Date: Tue, 12 Jun 2012 08:55:30 GMT


Server: Apache


Response

Details

/admin/images

GET /admin/images/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/images/





Request

HTTP/1.1 200 OK

Via: 1.1 ROOT




Date: Tue, 12 Jun 2012 08:55:31 GMT


Server: Apache

Response



61/65

Details

/admin/pic

GET /admin/pic/ HTTP/1.1




Referer: http://copyrightoffice.gov.bd/admin/pic/




Request

HTTP/1.1 200 OK

Via: 1.1 ROOT


Proxy-Connection: Keep-AliveContent-Length: 4469

Date: Tue, 12 Jun 2012 08:55:20 GMT


Server: Apache


Response

Details

/css

GET /css/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/css/




Request

HTTP/1.1 200 OK



Content-Length: 411

Date: Tue, 12 Jun 2012 08:55:18 GMT


Server: Apache


Response

Details

/images/banner

GET /images/banner/ HTTP/1.1

Pragma: no-cache

Request



62/65




Referer: http://copyrightoffice.gov.bd/images/banner/



HTTP/1.1 200 OK



Content-Length: 514

Date: Tue, 12 Jun 2012 08:55:18 GMT


Server: Apache


Response

Password type input with autocomplete enabled


InformationalType


Impact

Description

Recommendation

Affected items

Details

/admin

GET /admin/ HTTP/1.1

Pragma: no-cache




Referer: http://copyrightoffice.gov.bd/admin/




Request

HTTP/1.1 200 OK

Via: 1.1 ROOT




Date: Tue, 12 Jun 2012 08:55:20 GMT

Response



63/65


Server: Apache


Pragma: no-cache

Set-Cookie: PHPSESSID=82a56a911401903d5cc82a19cdea9c0c; path=/


Details

/admin/index.php


Pragma: no-cache







Request





Date: Tue, 12 Jun 2012 08:55:20 GMT


Server: Apache


Pragma: no-cache




Response

Possible server path disclosure (Unix)


InformationalType


Impact

Description

Recommendation

Affected items



64/65

Details

/images/index.php

GET /images/index.php HTTP/1.1







Request

HTTP/1.1 200 OK

Via: 1.1 ROOT




Server: Apache



Response

Possible username or password disclosure


InformationalType


Impact

Description

Recommendation

Affected items

Details

/admin/index.php


Pragma: no-cache




Request



65/65



HTTP/1.1 200 OK

Via: 1.1 ROOT





Server: Apache


Pragma: no-cache




Response

copyright of bangladesh scan result

Documents