operation ferguson report scan of police website

8/12/2019 Operation Ferguson Report Scan of Police Website

1/81

Acunetix Website Audit

12 August, 2014

Affected Items

Generated by Acunetix WVS Reporter (v8.0 Build 20120704)


2/81

Scan of http://www.slmpd.org/

Scan information

Scan details

Starttime 8/12/2014 5:56:22 PM

Finish time 8/12/2014 5:57:44 PM

Scan time 1 minutes, 22 secondsProfile Network_Scripts

Server information

Responsive True

Server banner Microsoft-IIS/7.0

Server OS Windows

Server technologies ASP.NET

Threat level

Acunetix Threat Level 2One or more medium-severity type vulnerabilities have been by the scanner. You shouldinvestigate each of these vulnerabilities to ensure they will not escalate to more severeproblems.

Alerts distribution

High

Medium

Low

Informational 99

0

12

0

111Total alerts found

Affected items

/

Parameter

HTML form without CSRF protectionAlert group

MediumSeverity

Description This alert may be a false positive, manual confirmation is required.Cross-site request forgery, also known as a one-click attack or session riding and abbreviated asCSRF or XSRF, is a type of malicious exploit of a website whereby unauthorized commands aretransmitted from a user that the website trusts.Acunetix WVS found a HTML form with no apparent CSRF protection implemented. Consult detailsfor more information about the affected HTML form.

Recommendations Check if this form requires CSRF protection and implement CSRF countermeasures if necessary.

Alert variants

2Acunetix Website Audit


3/81

Form name: Form action: http://www.slmpd.org/search/index.htmForm method: GETForm inputs:- cx [Hidden]- cof [Hidden]- ie [Hidden]- q [Text]

- sa [Submit]

Details

GET / HTTP/1.1Pragma: no-cacheAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/accidentreports.shtml

Parameter


MediumSeverity

Description This alert may be a false positive, manual confirmation is required.Cross-site request forgery, also known as a one-click attack or session riding and abbreviated asCSRF or XSRF, is a type of malicious exploit of a website whereby unauthorized commands aretransmitted from a user that the website trusts.Acunetix WVS found a HTML form with no apparent CSRF protection implemented. Consult details

for more information about the affected HTML form.Recommendations Check if this form requires CSRF protection and implement CSRF countermeasures if necessary.

Alert variants

Form name: Form action: http://www.slmpd.org/search/index.shtmlForm method: GETForm inputs:- cx [Hidden]- cof [Hidden]- ie [Hidden]

- q [Text]- sa [Submit]

Details

GET /accidentreports.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/records.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-alive

Accept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/board/index.html



4/81

Parameter

Broken linksAlert group

InformationalSeverity

Description A broken link refers to any link that should take you to a document, image or webpage, that actuallyresults in an error. This page was linked from the website but it is inaccessible.

Recommendations Remove the links to this file or make it accessible.

Alert variants

No details are available.DetailsGET /board/index.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/calea.shtml

Parameter


MediumSeverity



Alert variants

Form name: Form action: http://www.slmpd.org/search/index.shtmlForm method: GETForm inputs:- cx [Hidden]- cof [Hidden]- ie [Hidden]- q [Text]

- sa [Submit]

Details

GET /calea.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/chief/index.htm

Parameter



5/81





Alert variants

No details are available.Details

GET /chief/index.htm HTTP/1.1

Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/chromejs/chrome.js

Parameter





Alert variants


GET /chromejs/chrome.js HTTP/1.1Pragma: no-cache

Referer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/chrometheme/chromestyle.css

Parameter





Alert variants




6/81

GET /chrometheme/chromestyle.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/community/index.htm

Parameter





Alert variants


GET /community/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/crime_mapping.html

Parameter





Alert variants


GET /crime_mapping.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/search/index.htmAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/crimestats/index.htm

Parameter




7/81




Alert variants


GET /crimestats/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/css/master-style.css

Parameter





Alert variants


GET /css/master-style.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/internal_affairs/internal_affairs.aspAcunetix-Aspect: enabled

Acunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/dart.html

Parameter





Alert variants




8/81

GET /dart.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/search/index.htmAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/directory/index.htm

Parameter





Alert variants


GET /directory/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/faq.html

Parameter





Alert variants


GET /faq.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/search/index.htmAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/favicon.icon

Parameter




9/81




Alert variants


GET /favicon.icon HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/great/index.asp

Parameter

Broken linksAlert groupInformationalSeverity



Alert variants


GET /great/index.asp HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****

Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/history/index.htm

Parameter





Alert variants


GET /history/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*



10/81


11/81

GET /hr/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/internal_affairs/internal_affairs.asp

Parameter


MediumSeverity

Description This alert may be a false positive, manual confirmation is required.Cross-site request forgery, also known as a one-click attack or session riding and abbreviated asCSRF or XSRF, is a type of malicious exploit of a website whereby unauthorized commands aretransmitted from a user that the website trusts.

Acunetix WVS found a HTML form with no apparent CSRF protection implemented. Consult detailsfor more information about the affected HTML form.


Alert variants

Form name: form1Form action: http://www.slmpd.org/internal_affairs/sent.aspForm method: POSTForm inputs:- PK_CommendationKey [Select]- IsHuman [Hidden]- FirstName [Text]- LastName [Text]- MiddleInitial [Text]- BirthDate [Text]- Sex [Select]- RaceCode [Select]- EmailAddr [Text]- WorkPh [Text]- WorkExt [Text]- PrimaryPh [Text]- OtherPh ... (line truncated)

Details

GET /internal_affairs/internal_affairs.asp HTTP/1.1

Pragma: no-cacheReferer: http://www.slmpd.org/faq.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/leadership/index.html

Parameter





12/81



Alert variants


GET /leadership/index.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabled


/locations.shtml

Parameter


MediumSeverity



Alert variants

Form name: Form action: http://www.slmpd.org/locations.shtmlForm method: GETForm inputs:- Print [Button]

Details

GET /locations.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****

Acunetix-Aspect-Queries: filelist;aspectalertsHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*



13/81

Form name: Form action: http://www.slmpd.org/search/index.shtmlForm method: GETForm inputs:- cx [Hidden]- cof [Hidden]- ie [Hidden]- q [Text]

- sa [Submit]

Details

GET /locations.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

Form name: XJ900Form action: http://www.slmpd.org/locations.shtmlForm method: GETForm inputs:- from [Text]- to [Select]- locale [Select]- submit [Submit]

Details

GET /locations.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/main.jsParameter





Alert variants




14/81

GET /main.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/locations.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/mediarelations/index.htm

Parameter





Alert variants


GET /mediarelations/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/911.html

Parameter





Alert variants


GET /memorial/911.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.htmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/911.shtml

Parameter




15/81




Alert variants


GET /memorial/911.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/academy.shtml

Parameter





Alert variants


GET /memorial/academy.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/anonymous_tips.shtml

Parameter





Alert variants




16/81

GET /memorial/anonymous_tips.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/Aviation_Unit.shtml

Parameter





Alert variants


GET /memorial/Aviation_Unit.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/board/images/css/lightbox.css

Parameter





Alert variants


GET /memorial/board/images/css/lightbox.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/board/images/js/lightbox.js

Parameter




17/81




Alert variants


GET /memorial/board/images/js/lightbox.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/board/images/js/prototype.js

Parameter





Alert variants


GET /memorial/board/images/js/prototype.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/board/images/js/scriptaculous.js

Parameter





Alert variants




18/81

GET /memorial/board/images/js/scriptaculous.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/calea.shtml

Parameter





Alert variants


GET /memorial/calea.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/canine.shtml

Parameter





Alert variants


GET /memorial/canine.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/careers.shtml

Parameter




19/81


20/81

GET /memorial/child_abuse.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/citizens_academy.shtml

Parameter





Alert variants


GET /memorial/citizens_academy.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/cold_cases.shtml

Parameter





Alert variants


GET /memorial/cold_cases.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/crime_mapping.shtml

Parameter




21/81




Alert variants


GET /memorial/crime_mapping.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/crime_prevention.shtml

Parameter





Alert variants


GET /memorial/crime_prevention.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/crime_stats.shtml

Parameter





Alert variants




22/81

GET /memorial/crime_stats.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/CrimeLaboratory.shtml

Parameter





Alert variants


GET /memorial/CrimeLaboratory.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/css/default.ultimate.css

Parameter





Alert variants


GET /memorial/css/default.ultimate.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/css/dropdown.css

Parameter




23/81




Alert variants


GET /memorial/css/dropdown.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/css/footer.css

Parameter





Alert variants


GET /memorial/css/footer.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/css/header.css

Parameter





Alert variants




24/81

GET /memorial/css/header.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/dart.shtml

Parameter





Alert variants


GET /memorial/dart.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/dept_contact.shtml

Parameter





Alert variants


GET /memorial/dept_contact.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/deputy_chiefs.shtml

Parameter




25/81




Alert variants


GET /memorial/deputy_chiefs.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/dist_five.shtml

Parameter





Alert variants


GET /memorial/dist_five.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/dist_four.shtml

Parameter





Alert variants




26/81


27/81




Alert variants


GET /memorial/dist_three.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/dist_two.shtml

Parameter





Alert variants


GET /memorial/dist_two.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/do_the_right_thing.shtml

Parameter





Alert variants




28/81

GET /memorial/do_the_right_thing.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/events.shtml

Parameter





Alert variants


GET /memorial/events.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/faq.shtml

Parameter





Alert variants


GET /memorial/faq.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/fraud.shtml

Parameter




29/81




Alert variants


GET /memorial/fraud.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/great.shtml

Parameter





Alert variants


GET /memorial/great.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/history.shtml

Parameter





Alert variants




30/81

GET /memorial/history.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/Homicide.shtml

Parameter





Alert variants


GET /memorial/Homicide.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/homicide.shtml

Parameter





Alert variants


GET /memorial/homicide.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/homicide_ministers.shtml

Parameter




31/81




Alert variants


GET /memorial/homicide_ministers.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/hr_commissioned.shtml

Parameter





Alert variants


GET /memorial/hr_commissioned.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/index.htm

Parameter





Alert variants




32/81

GET /memorial/index.htm HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/index.html

Parameter





Alert variants


GET /memorial/index.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.htmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/index.shtml

Parameter





Alert variants


GET /memorial/index.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/info.asp

Parameter




33/81




Alert variants


GET /memorial/info.asp HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/deputy_chiefs/Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/internal_affairs.shtml

Parameter





Alert variants


GET /memorial/internal_affairs.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/juvenile.shtml

Parameter





Alert variants




34/81

GET /memorial/juvenile.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/library.shtml

Parameter





Alert variants


GET /memorial/library.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/locations.shtml

Parameter





Alert variants


GET /memorial/locations.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/Majors.shtml

Parameter




35/81




Alert variants


GET /memorial/Majors.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/majors.shtml

Parameter





Alert variants


GET /memorial/majors.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/memorial/memorial.shtml

Parameter





Alert variants




36/81

GET /memorial/memorial/memorial.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/mission_values_statements.shtml

Parameter





Alert variants


GET /memorial/mission_values_statements.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/mounted_patrol.shtml

Parameter





Alert variants


GET /memorial/mounted_patrol.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/pal.shtml

Parameter




37/81




Alert variants


GET /memorial/pal.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/police_explorers.shtml

Parameter





Alert variants


GET /memorial/police_explorers.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/press_room.shtml

Parameter





Alert variants




38/81

GET /memorial/press_room.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/PressRoom/login_s.asp

Parameter





Alert variants


GET /memorial/PressRoom/login_s.asp HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/private_security.shtml

Parameter





Alert variants


GET /memorial/private_security.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/property_custody_s.asp

Parameter




39/81




Alert variants


GET /memorial/property_custody_s.asp HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/records.shtml

Parameter





Alert variants


GET /memorial/records.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabled


/memorial/RideAlong.shtml

Parameter





Alert variants




40/81

GET /memorial/RideAlong.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/sex_crimes.shtml

Parameter





Alert variants


GET /memorial/sex_crimes.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/memorial/stlpdYoutube.shtml

Parameter





Alert variants


GET /memorial/stlpdYoutube.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/memorial/your_info.shtml

Parameter




41/81




Alert variants


GET /memorial/your_info.shtml HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/memorial/memorial.shtmlAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/PressRoom/board/images/css/lightbox.css

Parameter





Alert variants


GET /PressRoom/board/images/css/lightbox.css HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/PressRoom/login_s.aspAcunetix-Aspect: enabled


/PressRoom/board/images/js/lightbox.js

Parameter





Alert variants




42/81

GET /PressRoom/board/images/js/lightbox.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/PressRoom/login_s.aspAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/PressRoom/board/images/js/prototype.js

Parameter





Alert variants


GET /PressRoom/board/images/js/prototype.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/PressRoom/login_s.aspAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Accept: */*

/PressRoom/board/images/js/scriptaculous.js

Parameter





Alert variants


GET /PressRoom/board/images/js/scriptaculous.js HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/PressRoom/login_s.aspAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/PressRoom/careers.html

Parameter




43/81




Alert variants


GET /PressRoom/careers.html HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/PressRoom/login.aspAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/PressRoom/login.asp

Parameter


MediumSeverity



Alert variants

Form name: loginForm action: http://www.slmpd.org/PressRoom/login_process.aspForm method: POSTForm inputs:- uname [Text]- pword [Password]

Details

GET /PressRoom/login.asp HTTP/1.1Pragma: no-cacheReferer: http://www.slmpd.org/search/index.htm

Acunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

Password type input with autocomplete enabledAlert group


Description When a new name and password is entered in a form and the form is submitted, the browser asks

if the password should be saved. Thereafter when the form is displayed, the name and passwordare filled in automatically or are completed as the name is entered. An attacker with local accesscould obtain the cleartext password from the browser cache.



44/81

Recommendations The password autocomplete should be disabled in sensitive applications.To disable autocomplete, you may use a code similar to:

Alert variants

Password type input named pword from form named login with action login_process.asp hasautocomplete enabled.

Details

GET /PressRoom/login.asp HTTP/1.1Pragma: no-cache

Referer: http://www.slmpd.org/search/index.htmAcunetix-Aspect: enabledAcunetix-Aspect-Password: *****Acunetix-Aspect-Queries: filelist;aspectalertsCookie: ASPSESSIONIDSABQDQTB=DKAIJHOAEHIIBMGDGLDDGCMFHost: www.slmpd.orgConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)Accept: */*

/PressRoom/login_s.asp

Parameter


MediumSeverity



Alert variants

Form name: loginForm action: http://www.slmpd.org/PressRoom/login_process_s.aspForm method: POSTForm inputs:- uname [Text]- pword [Password]

Details

GET /PressRoom/logi

operation ferguson report scan of police website

Documents