retard@aghadiry1:~/ssh/nikto$ perl nikto.pl -h www.emeckz.com -***** SSL support not available (see docs for SSL install instructions) ***** --------------------------------------------------------------------------- - Nikto 1.35/1.34 - www.cirt.net + Target IP: 66.28.206.153 + Target Hostname: www.emeckz.com + Target Port: 80 + Start Time: Tue Jul 18 01:26:09 2006 --------------------------------------------------------------------------- - Scan is dependent on "Server" string which can be faked, use -g to override + Server: Apache + Server does not respond with '404' for error messages (uses '403'). + This may increase false-positives. + No CGI Directories found (use '-C all' to force check all possible dirs) + /cgi-bin/test-cgi - Apache 2.0 default script is executable and reveals system information. All default scripts should be removed. (GET) + /index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET) + /index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET) + /index.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET) + /index.php?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET) + /index.php?module=My_eGallery - My_eGallery prior to 3.1.1.g are vulnerable to a remote execution bug via SQL command injection. (GET) + /index.php?top_message=<script>alert(document.cookie)</script> - Led-Forums allows any user to change the welcome message, and it is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET) + /css - Redirects to http://www.emeckz.com/css/ , This might be interesting... + /downloads/ - This might be interesting... (GET) + /forums/ - This might be interesting... (GET) + /js - Redirects to http://www.emeckz.com/js/ , This might be interesting... + /pics/ - This might be interesting... (GET) + /index.php?base=test%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET) + /index.php?IDAdmin=test - This might be interesting... has been seen in web logs from an unknown scanner. (GET) + /index.php?pymembs=admin - This might be interesting... has been seen in web logs from an unknown scanner. (GET) + /index.php?SqlQuery=test%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET) + /index.php?tampon=test%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET) + /index.php?topic=&lt;script&gt;alert(document.cookie)&lt;/script&gt;%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET) + 1942 items checked - 16 item(s) found on remote host(s) + End Time: Tue Jul 18 01:29:26 2006 (197 seconds) --------------------------------------------------------------------------- + 1 host(s) tested retard@aghadiry1:~/ssh/nikto$