- Nikto v2.1.6/2.1.5+ Target Host: 10.10.10.27+ Target Port: 80+ GET Server leaks inodes via ETags, header found with file /, fields: 0x202 0x552f4401e2464 + GET The anti-clickjacking X-Frame-Options header is not present.+ GET The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS+ GET The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type+ OPTIONS Allowed HTTP Methods: OPTIONS, GET, HEAD, POST + OSVDB-29786: GET /admin.php?en_log_id=0&action=config: EasyNews from http://www.webrc.ca version 4.3 allows remote admin access. This PHP file should be protected.+ OSVDB-29786: GET /admin.php?en_log_id=0&action=users: EasyNews from http://www.webrc.ca version 4.3 allows remote admin access. This PHP file should be protected.+ OSVDB-3092: GET /admin.php: This might be interesting...+ OSVDB-3233: GET /icons/README: Apache default file found.+ GET The anti-clickjacking X-Frame-Options header is not present.+ GET The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS+ GET The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
Comments