Security Error 011
[ Go Back ]
Total impact: 46
Affected tags: xss, csrf, id, rfe, lfi
Variable: COOKIE.handl_url | Value: https://ijaazah.com/lifecycle/flows/signup?access_type=offline&app_domain=https://ijaazah.com&client_id=413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com&continue=https://accounts.google.com/signin/oauth/legacy/consent?authuser%3Dunknown%26part%3DAJi8hAMgwfbnTaqhtEd8kJPNlxZsvHbYnOExesXxrB8VI0n5-v3Mycuj4s_-8MyKOxDPQbdvBcM7iQoHzXha6Bsa0Wdiqjwf9P0M25sXkhtsfoZDFSP1xf4FiysKai_Ee0fizDa2y_oi35nxGrqJIpqxepMPeRnoOGfL2RgotALR1E4oK1yeeYWGI5UTd3XaGgvG_Qk1H7GER8YP2dkFUMitGKWYzwXvQ7KrHtNhKd_X1OkIBvvT8ZuEVLEurWb13EaWqlcpbl0y5oaRig4BYtk_9tzR32_vE6vB-4JjG02KfSwLs4v44Y2uFR9HU146G5enNyNWgZzHrMls-WouCy5j17m5pOLFcbRpMbKXL4L7z03YHzz5xXVpipdPY4GbH4MoABVRh0w_aSQ9IAQ4-nhhxwl3ApkabWdrGUZOPLnJK2SuvBZj1cZVYY8PuZrjZzQLZYjGQrkrbtYSNIYDqyYSXieQeGUnWQ%26flowName%3DGeneralOAuthFlow%26as%3DS-1710812389%253A1714358680023618%26client_id%3D413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com%23&ddm=0&dsh=S-1710812389:1714358680023618&flowEntry=SignUp&flowName=GlifWebSignIn&o2v=2&opparams=%253F&prompt=select_account&rart=ANgoxcfn432xvF1ljjM1EPmCZAKpM4OzokNU7l9xaVvvY464kWjHq9tZ0qVLQw5i4NY8CuLpVHwWyI8sU2dT6IfqFD1j0cZ9lDvej_QJmW7nl8VlvYRM2Sk&redirect_uri=https://ijaazah.com/wp-login.php?loginSocial%3Dgoogle&response_type=code&scope=email+profile&service=lso&signInUrl=https://accounts.google.com/signin/oauth?access_type%3Doffline%26app_domain%3Dhttps://ijaazah.com%26client_id%3D413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com%26continue%3Dhttps://accounts.google.com/signin/oauth/legacy/consent?authuser%253Dunknown%2526part%253DAJi8hAMgwfbnTaqhtEd8kJPNlxZsvHbYnOExesXxrB8VI0n5-v3Mycuj4s_-8MyKOxDPQbdvBcM7iQoHzXha6Bsa0Wdiqjwf9P0M25sXkhtsfoZDFSP1xf4FiysKai_Ee0fizDa2y_oi35nxGrqJIpqxepMPeRnoOGfL2RgotALR1E4oK1yeeYWGI5UTd3XaGgvG_Qk1H7GER8YP2dkFUMitGKWYzwXvQ7KrHtNhKd_X1OkIBvvT8ZuEVLEurWb13EaWqlcpbl0y5oaRig4BYtk_9tzR32_vE6vB-4JjG02KfSwLs4v44Y2uFR9HU146G5enNyNWgZzHrMls-WouCy5j17m5pOLFcbRpMbKXL4L7z03YHzz5xXVpipdPY4GbH4MoABVRh0w_aSQ9IAQ4-nhhxwl3ApkabWdrGUZOPLnJK2SuvBZj1cZVYY8PuZrjZzQLZYjGQrkrbtYSNIYDqyYSXieQeGUnWQ%2526flowName%253DGeneralOAuthFlow%2526as%253DS-1710812389%25253A1714358680023618%2526client_id%253D413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com%2523%26ddm%3D0%26dsh%3DS-1710812389:1714358680023618%26flowName%3DGeneralOAuthLite%26o2v%3D2%26opparams%3D%25253F%26prompt%3Dselect_account%26rart%3DANgoxcfn432xvF1ljjM1EPmCZAKpM4OzokNU7l9xaVvvY464kWjHq9tZ0qVLQw5i4NY8CuLpVHwWyI8sU2dT6IfqFD1j0cZ9lDvej_QJmW7nl8VlvYRM2Sk%26redirect_uri%3Dhttps://ijaazah.com/wp-login.php?loginSocial%253Dgoogle%26response_type%3Dcode%26scope%3Demail%2Bprofile%26service%3Dlso%26state%3Dcbe616f646bccbb1bdc084817082624c&state=cbe616f646bccbb1bdc084817082624c
Impact: 23 | Tags: xss, csrf, id, rfe, lfi
Description: Detects JavaScript with(), ternary operators and XML predicate attacks | Tags: xss, csrf | ID: 7
Description: Detects possible includes and typical script methods | Tags: xss, csrf, id, rfe | ID: 16
Description: Detects very basic XSS probings | Tags: xss, csrf, id, rfe | ID: 21
Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID: 23
Description: Detects url injections and RFE attempts | Tags: id, rfe, lfi | ID: 61
Variable: COOKIE.handl_landing_page | Value: https://ijaazah.com/lifecycle/flows/signup?access_type=offline&app_domain=https://ijaazah.com&client_id=413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com&continue=https://accounts.google.com/signin/oauth/legacy/consent?authuser%3Dunknown%26part%3DAJi8hAMgwfbnTaqhtEd8kJPNlxZsvHbYnOExesXxrB8VI0n5-v3Mycuj4s_-8MyKOxDPQbdvBcM7iQoHzXha6Bsa0Wdiqjwf9P0M25sXkhtsfoZDFSP1xf4FiysKai_Ee0fizDa2y_oi35nxGrqJIpqxepMPeRnoOGfL2RgotALR1E4oK1yeeYWGI5UTd3XaGgvG_Qk1H7GER8YP2dkFUMitGKWYzwXvQ7KrHtNhKd_X1OkIBvvT8ZuEVLEurWb13EaWqlcpbl0y5oaRig4BYtk_9tzR32_vE6vB-4JjG02KfSwLs4v44Y2uFR9HU146G5enNyNWgZzHrMls-WouCy5j17m5pOLFcbRpMbKXL4L7z03YHzz5xXVpipdPY4GbH4MoABVRh0w_aSQ9IAQ4-nhhxwl3ApkabWdrGUZOPLnJK2SuvBZj1cZVYY8PuZrjZzQLZYjGQrkrbtYSNIYDqyYSXieQeGUnWQ%26flowName%3DGeneralOAuthFlow%26as%3DS-1710812389%253A1714358680023618%26client_id%3D413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com%23&ddm=0&dsh=S-1710812389:1714358680023618&flowEntry=SignUp&flowName=GlifWebSignIn&o2v=2&opparams=%253F&prompt=select_account&rart=ANgoxcfn432xvF1ljjM1EPmCZAKpM4OzokNU7l9xaVvvY464kWjHq9tZ0qVLQw5i4NY8CuLpVHwWyI8sU2dT6IfqFD1j0cZ9lDvej_QJmW7nl8VlvYRM2Sk&redirect_uri=https://ijaazah.com/wp-login.php?loginSocial%3Dgoogle&response_type=code&scope=email+profile&service=lso&signInUrl=https://accounts.google.com/signin/oauth?access_type%3Doffline%26app_domain%3Dhttps://ijaazah.com%26client_id%3D413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com%26continue%3Dhttps://accounts.google.com/signin/oauth/legacy/consent?authuser%253Dunknown%2526part%253DAJi8hAMgwfbnTaqhtEd8kJPNlxZsvHbYnOExesXxrB8VI0n5-v3Mycuj4s_-8MyKOxDPQbdvBcM7iQoHzXha6Bsa0Wdiqjwf9P0M25sXkhtsfoZDFSP1xf4FiysKai_Ee0fizDa2y_oi35nxGrqJIpqxepMPeRnoOGfL2RgotALR1E4oK1yeeYWGI5UTd3XaGgvG_Qk1H7GER8YP2dkFUMitGKWYzwXvQ7KrHtNhKd_X1OkIBvvT8ZuEVLEurWb13EaWqlcpbl0y5oaRig4BYtk_9tzR32_vE6vB-4JjG02KfSwLs4v44Y2uFR9HU146G5enNyNWgZzHrMls-WouCy5j17m5pOLFcbRpMbKXL4L7z03YHzz5xXVpipdPY4GbH4MoABVRh0w_aSQ9IAQ4-nhhxwl3ApkabWdrGUZOPLnJK2SuvBZj1cZVYY8PuZrjZzQLZYjGQrkrbtYSNIYDqyYSXieQeGUnWQ%2526flowName%253DGeneralOAuthFlow%2526as%253DS-1710812389%25253A1714358680023618%2526client_id%253D413537724008-jifppvvakspa50thkpi47ru8vn7ktapi.apps.googleusercontent.com%2523%26ddm%3D0%26dsh%3DS-1710812389:1714358680023618%26flowName%3DGeneralOAuthLite%26o2v%3D2%26opparams%3D%25253F%26prompt%3Dselect_account%26rart%3DANgoxcfn432xvF1ljjM1EPmCZAKpM4OzokNU7l9xaVvvY464kWjHq9tZ0qVLQw5i4NY8CuLpVHwWyI8sU2dT6IfqFD1j0cZ9lDvej_QJmW7nl8VlvYRM2Sk%26redirect_uri%3Dhttps://ijaazah.com/wp-login.php?loginSocial%253Dgoogle%26response_type%3Dcode%26scope%3Demail%2Bprofile%26service%3Dlso%26state%3Dcbe616f646bccbb1bdc084817082624c&state=cbe616f646bccbb1bdc084817082624c
Impact: 23 | Tags: xss, csrf, id, rfe, lfi
Description: Detects JavaScript with(), ternary operators and XML predicate attacks | Tags: xss, csrf | ID: 7
Description: Detects possible includes and typical script methods | Tags: xss, csrf, id, rfe | ID: 16
Description: Detects very basic XSS probings | Tags: xss, csrf, id, rfe | ID: 21
Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID: 23
Description: Detects url injections and RFE attempts | Tags: id, rfe, lfi | ID: 61